feat(lab1): juice shop deploy + triage report + PR template + CI smoke test

[Wilikson173]

Goal

Deploy OWASP Juice Shop v20.0.0 locally, produce a triage report of the attack surface, bootstrap the PR template workflow, and add a CI smoke-test that verifies Juice Shop health on every PR.

Changes

• submissions/lab1.md — full triage report with deployment details, security headers analysis, and top 3 risks mapped to OWASP Top 10:2025
• .github/PULL_REQUEST_TEMPLATE.md — PR template with Goal / Changes / Testing / Artifacts sections and 3-item checklist
• .github/workflows/lab1-smoke.yml — GitHub Actions workflow that pulls Juice Shop v20.0.0, waits up to 60s for readiness, and fails the build if homepage returns non-200

Testing

docker run -d --name juice-shop -p 127.0.0.1:3000:3000 bkimminich/juice-shop:v20.0.0

docker ps --filter name=juice-shop --format 'table {{.Names}}\t{{.Status}}\t{{.Ports}}'
juice-shop Up 9 minutes 127.0.0.1:3000->3000/tcp
curl -s -o /dev/null -w "HTTP %{http_code}\n" http://127.0.0.1:3000/
HTTP 200
curl -s http://127.0.0.1:3000/rest/admin/application-version
{"version":"20.0.0"}
curl -s http://127.0.0.1:3000/api/Products | jq '.data | length'
46

Artifacts & Screenshots

• submissions/lab1.md — triage report
• .github/PULL_REQUEST_TEMPLATE.md — PR template (auto-filled this description)
• .github/workflows/lab1-smoke.yml — CI smoke test

---

Checklist

• Title follows feat(labN): <topic> style
• No secrets or large temp files committed
• Submission file exists at submissions/lab1.md