Show HN: Hands-on Docker security labs, from CIS checks to AI context poisoning