feat(lab1): juice shop deploy + PR template + triage report

[coilgung]

Goal

Deploy OWASP Juice Shop, document its initial security, and add the Lab 1 PR workflow.

Changes

• Added submissions/lab1.md
• Added .github/PULL_REQUEST_TEMPLATE.md, a pr template
• Added .github/workflows/lab1-smoke.yml for smoke test.

Testing

docker ps --filter name=juice-shop --format 'table {{.Names}}\t{{.Status}}\t{{.Ports}}'
curl -s -o /dev/null -w "HTTP %{http_code}\n" http://127.0.0.1:3000
curl -s http://127.0.0.1:3000/rest/admin/application-version
curl -s http://127.0.0.1:3000/api/Products | jq '.data | length'
docker inspect bkimminich/juice-shop:v20.0.0 --format '{{index .RepoDigests 0}}'

HTTP 200
{"version":"20.0.0"}46
bkimminich/juice-shop@sha256:fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0

Artifacts & Screenshots

CI: https://github.com/coilgung/DevSecOps-Intro/actions/runs/34788348476/job/103807858844

Checklist

• PR title follows feat(labN): <topic>
• No secrets or large temporary files committed
• submissions/labN.md exists