feat(lab1): juice shop deploy + PR template + triage report

[rmcavalcante7]

Goal

Submit Lab 1 with the Juice Shop deployment evidence, triage report, PR template, GitHub community evidence, and CI smoke test bonus.

Changes

• Added the Lab 1 submission report in submissions/lab1.md.
• Added the repository pull request template in .github/PULL_REQUEST_TEMPLATE.md.
• Added the bonus GitHub Actions smoke test in .github/workflows/lab1-smoke.yml.
• Documented Juice Shop deployment, application surface, security headers, risks, GitHub community activity, and CI validation evidence.

Testing

curl http://127.0.0.1:3000/rest/products/search?q=
HTTP 200 observed from the Juice Shop product endpoint.

curl -I http://127.0.0.1:3000
Security headers reviewed:

• Content-Security-Policy: missing
• Strict-Transport-Security: missing
• X-Content-Type-Options: present
• X-Frame-Options: present

GitHub Actions smoke test:
https://github.com/rmcavalcante7/DevSecOps-Intro/actions/runs/36532579603
Result: success
Output excerpt:
Waiting for Juice Shop (1/12)...
{"version":"20.0.0"}Juice Shop is ready on attempt 2.

Artifacts & Screenshots

• Main report: submissions/lab1.md
• Draft PR template evidence is embedded in the Task 2 section of the report.
• GitHub community evidence is embedded in the Task 3 section of the report.
• CI smoke test evidence is documented in the Bonus section of the report.
• Course PR: feat(lab1): juice shop deploy + PR template + triage report #1799

Checklist

• The title follows feat(lab1): juice shop deploy + PR template + triage report.
• No secrets or large temporary files are committed.
• submissions/lab1.md exists.