feat(lab1): triage report + PR template

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,20 @@
+# Pull Request
+
+## Goal
+<!-- 1 sentence: what this PR delivers -->
+
+## Changes
+<!-- Bullet list: artifacts added/modified -->
+
+## Testing
+<!-- Commands + observed output: how you verified it works -->
+
+## Artifacts & Screenshots
+<!-- Links to files in this PR, image embeds where useful -->
+
+---
+
+## Checklist
+- [ ] Title is clear (`feat(labN): <topic>` style)
+- [ ] No secrets/large temp files committed
+- [ ] Submission file at `submissions/labN.md` exists

.github/workflows/lab1-smoke.yml

@@ -0,0 +1,34 @@
+name: Smoke Test Juice Shop
+
+on:
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  smoke-test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run Juice Shop
+        run: docker run -d --name juice-shop -p 3000:3000 bkimminich/juice-shop:v20.0.0
+
+      - name: Wait for ready
+        run: |
+          for i in $(seq 1 30); do
+            curl --silent --fail http://localhost:3000/rest/admin/application-version && exit 0
+            sleep 2
+          done
+          exit 1
+
+      - name: Check homepage
+        run: |
+          [ "$(curl -s -o /dev/null -w '%{http_code}' http://localhost:3000)" = "200" ]
+
+      - name: Check API
+        run: |
+          curl -s http://localhost:3000/api/Products | jq '.data | length' | grep -q .

submissions/lab1.md

@@ -0,0 +1,6 @@
+
+## Bonus: CI Smoke Test
+
+- Workflow file: `.github/workflows/lab1-smoke.yml`
+- Trigger: pull_request on main
+- Run URL: (will appear after PR)