feat(lab3): SSH signing + gitleaks pre-commit + history rewrite practice

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,32 @@
+## Goal
+<!-- One sentence: what this PR delivers -->
+
+## Changes
+<!-- Bullet list of artifacts added or modified -->
+
+-
+
+## Testing
+<!-- Commands run and observed output -->
+
+```bash
+# paste commands here
+```
+
+**Observed output:**
+
+```
+# paste output here
+```
+
+## Artifacts & Screenshots
+<!-- Links to files in this PR; embed screenshots where useful -->
+
+-
+
+---
+
+## Checklist
+- [ ] Title is clear (`feat(labN): <topic>` style)
+- [ ] No secrets/large temp files committed
+- [ ] Submission file at `submissions/labN.md` exists

.github/workflows/lab1-smoke.yaml

@@ -0,0 +1,35 @@
+# .github/workflows/lab1-smoke.yml
+name: Smoke Test Juice Shop
+on:
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  smoke-test:
+    runs-on: ubuntu-latest
+    services:
+      juice-shop:
+        image: bkimminich/juice-shop:v20.0.0
+        ports:
+          - 3000:3000
+    steps:
+      - name: Wait for Juice Shop to be ready
+        run: |
+          for i in $(seq 1 30); do
+            if curl --silent --fail http://localhost:3000/rest/admin/application-version >/dev/null; then
+              echo "Juice Shop is ready!"
+              exit 0
+            fi
+            echo "Waiting for Juice Shop... (attempt $i/30)"
+            sleep 2
+          done
+          echo "Error: Juice Shop failed to start within 60 seconds"
+          exit 1
+
+      - name: Verify homepage returns 200
+        run: |
+          curl -v http://localhost:3000/rest/admin/application-version
+          echo "smoke test passed"

.pre-commit-config.yaml

@@ -0,0 +1,11 @@
+repos:
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.30.1
+    hooks:
+      - id: gitleaks
+
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      - id: detect-private-key
+      - id: check-added-large-files