feat(lab2): Threagile threat model + secure variant + auth flow

[raylduk8]

Goal

This PR delivers a STRIDE-based threat model for OWASP Juice Shop using Threagile

Changes

• labs/lab2/threagile-model-secure.yaml - secure variant with forcing HTTPS, improved encryption

• submissions/[lab2.md](https://vk.com/away.php?to=https%3A%2F%2Flab2.md&utf=1) - baseline risk count table + top 5 risks with STRIDE mapping + trust boundary observation + secure variant risk difference + honesty check

Testing

Baseline Run

docker run --rm \

  -v "$(pwd)/labs/lab2":/app/work \

  threagile/threagile:0.9.1 \

  -model /app/work/threagile-model.yaml \

  -output /app/work/output

Secure Variant Run

docker run --rm \

  -v "$(pwd)/labs/lab2":/app/work \

  threagile/threagile:0.9.1 \

  -model /app/work/threagile-model-secure.yaml \

  -output /app/work/output-secure

Risk Comparison

jq '[.[] | .severity] | group_by(.) | map({severity: .[0], count: length})' labs/lab2/output/risks.json

jq '[.[] | .severity] | group_by(.) | map({severity: .[0], count: length})' labs/lab2/output-secure/risks.json

Baseline total risks: 23

Secure variant total risks: 19

Artifacts & Screenshots

---

Checklist

• Task 1 — Baseline risk table + top-5 with STRIDE mapping
• Task 2 — Secure variant + risk diff table
• Bonus — Auth-flow model + 3 auth-specific risks