feat(lab2): Threagile threat model + secure variant

[ironveils]

Pull Request

Goal

Generate a STRIDE-based threat model of OWASP Juice Shop with Threagile, then produce a secure-variant model and diff the risk reports.

Changes

• submissions/lab2.md
• labs/lab2/threagile-model-secure.yaml

Testing

• Baseline: 23 risks (4 elevated, 14 medium, 5 low)
• Secure variant: 20 risks (3 elevated, 12 medium, 5 low)

Artifacts & Screenshots

• submissions/lab2.md
• labs/lab2/threagile-model-secure.yaml

Checklist

• Title is clear (feat(labN): <topic>)
• No secrets/large temp files committed
• Submission file at submissions/labN.md exists
• Task 1 — Baseline risk table + top-5 with STRIDE mapping
• Task 2 — Secure variant + risk diff table
• Bonus — Auth-flow model + 3 auth-specific risks