Initial commit: Imperva WAF demo lab

Flight-booking app scaffolded from the source running on the GCP host,
plus the four-screen frontend and three OWASP attack endpoints (SQLi,
reflected XSS, path traversal) built and locally verified against a
live uvicorn/vite dev pair. Includes deploy.sh (local build -> ship
over ssh -> swap on host) and docs/ carried over from the handoff.

backend/boarding_passes/BP-1002.txt

@@ -0,0 +1,11 @@
+====================================
+   OUTER SPACE FLIGHTS - BOARDING PASS
+====================================
+Passenger:   A. ALICE
+Flight:      OUT202
+Route:       Earth (LAX) -> Mars Colony Alpha
+Departs:     2026-09-02 03:30
+Seat:        02A
+Gate:        G14
+Status:      CONFIRMED
+====================================