feat(lab1): juice shop deploy + PR template + triage report

[aylixxx]

Goal

Deploy OWASP Juice Shop locally, create an initial security triage report, set up a pull request template, and establish the workflow that will be used for future course submissions.

Changes

• Added submissions/lab1.md
• Deployed and verified OWASP Juice Shop v20.0.0
• Documented deployment details and attack surface observations
• Performed a basic security header review
• Identified and documented three initial security risks
• Added .github/PULL_REQUEST_TEMPLATE.md
• Completed GitHub Community engagement requirements

Testing

Commands used:

docker ps --filter name=juice-shop
curl -s -o /dev/null -w "HTTP %{http_code}\n" http://127.0.0.1:3000
curl -s http://127.0.0.1:3000/api/Products | jq '.data | length'
curl -s http://127.0.0.1:3000/rest/admin/application-version | jq
curl -I http://127.0.0.1:3000

Observed results:

HTTP 200
Juice Shop container running successfully
/api/Products returned product data
Application version reported as 20.0.0
Security headers reviewed and documented in submission

Artifacts & Screenshots

• submissions/lab1.md
• .github/PULL_REQUEST_TEMPLATE.md
• Browser screenshots (if attached)
• Docker verification output included in submission

Checklist

• Title is clear (feat(lab1): juice shop deploy + PR template + triage report)
• No secrets/large temp files committed
• Submission file at submissions/lab1.md exists