fix: update image paths in lab README files for correct referencing

Author: emmanuelknafo

labs/lab-00-prerequisites/README.md

@@ -39,7 +39,7 @@ python --version
 az version
 ```
 
-![Tool versions](../images/lab-00/lab-00-tools-installed.png)
+![Tool versions](../../images/lab-00/lab-00-tools-installed.png)
 
 ## Exercise 2: Clone the Demo App Repository
 
@@ -49,7 +49,7 @@ git clone https://github.com/devopsabcs-engineering/apm-security-scan-demo-app.g
 cd apm-security-scan-demo-app
 ```
 
-![Repository cloned](../images/lab-00/lab-00-clone-repo.png)
+![Repository cloned](../../images/lab-00/lab-00-clone-repo.png)
 
 ## Exercise 3: Verify Project Structure
 

labs/lab-01-explore-violations/README.md

@@ -40,7 +40,7 @@ Get-Content apm-demo-app-001\src\agents\helper.agent.md
 
 Look for comments marking `VIOLATION` — these indicate where hidden Unicode characters are embedded.
 
-![App 001 violations](../images/lab-01/lab-01-app-001-violations.png)
+![App 001 violations](../../images/lab-01/lab-01-app-001-violations.png)
 
 ## Exercise 3: Inspect Semantic Violations (App 002)
 

labs/lab-02-unicode-scanning/README.md

@@ -28,7 +28,7 @@ cd apm-demo-app-001
 apm audit
 ```
 
-![APM audit output](../images/lab-02/lab-02-apm-audit-output.png)
+![APM audit output](../../images/lab-02/lab-02-apm-audit-output.png)
 
 ## Exercise 2: Generate SARIF Output
 
@@ -42,7 +42,7 @@ Inspect the SARIF file:
 Get-Content apm-unicode-results.sarif | python -m json.tool | Select-Object -First 50
 ```
 
-![SARIF output](../images/lab-02/lab-02-sarif-output.png)
+![SARIF output](../../images/lab-02/lab-02-sarif-output.png)
 
 ## Exercise 3: Understand Severity Tiers
 

labs/lab-03-lockfile-integrity/README.md

@@ -29,7 +29,7 @@ apm audit --ci
 
 This should fail because app 005 has no `apm.lock.yaml` committed.
 
-![Lockfile missing](../images/lab-03/lab-03-lockfile-missing.png)
+![Lockfile missing](../../images/lab-03/lab-03-lockfile-missing.png)
 
 ## Exercise 2: Generate a Lockfile
 
@@ -49,7 +49,7 @@ apm audit --ci
 Get-Content ..\src\config\apm-policy.yml
 ```
 
-![Policy config](../images/lab-03/lab-03-policy-config.png)
+![Policy config](../../images/lab-03/lab-03-policy-config.png)
 
 ## Exercise 4: SARIF Output
 

labs/lab-04-semantic-patterns/README.md

@@ -26,7 +26,7 @@ description: "Run the semantic pattern scanner to detect Base64 payloads, exfilt
 python src\converters\semantic-to-sarif.py --scan-dir apm-demo-app-002 --output app002-semantic.sarif
 ```
 
-![Semantic scan results](../images/lab-04/lab-04-semantic-results.png)
+![Semantic scan results](../../images/lab-04/lab-04-semantic-results.png)
 
 ## Exercise 2: Review the Findings
 

labs/lab-05-mcp-validation/README.md

@@ -26,15 +26,15 @@ description: "Validate MCP server configurations against allowlists, transport s
 Get-Content src\config\mcp-allowlist.json | python -m json.tool
 ```
 
-![MCP allowlist](../images/lab-05/lab-05-mcp-allowlist.png)
+![MCP allowlist](../../images/lab-05/lab-05-mcp-allowlist.png)
 
 ## Exercise 2: Scan App 003 (MCP Violations)
 
 ```powershell
 python src\converters\mcp-to-sarif.py --scan-dir apm-demo-app-003 --output app003-mcp.sarif
 ```
 
-![MCP validation results](../images/lab-05/lab-05-mcp-results.png)
+![MCP validation results](../../images/lab-05/lab-05-mcp-results.png)
 
 ## Exercise 3: Review Findings
 

labs/lab-06-ado-advanced-security/README.md

@@ -22,13 +22,13 @@ description: "Upload SARIF findings to Azure DevOps Advanced Security and triage
 
 Navigate to the ADO project and run the `apm-security-scan` pipeline.
 
-![ADO pipeline run](../images/lab-06-ado/lab-06-ado-pipeline-run.png)
+![ADO pipeline run](../../images/lab-06-ado/lab-06-ado-pipeline-run.png)
 
 ## Exercise 2: View Advanced Security Findings
 
 Navigate to **Repos > Advanced Security** in your ADO project.
 
-![ADO Advanced Security](../images/lab-06-ado/lab-06-ado-advsec.png)
+![ADO Advanced Security](../../images/lab-06-ado/lab-06-ado-advsec.png)
 
 ## Exercise 3: Compare with GitHub
 

labs/lab-06-github-security-tab/README.md

@@ -22,7 +22,7 @@ description: "Upload SARIF findings to GitHub Code Scanning and triage results i
 
 Navigate to the `apm-security-scan-demo-app` repository on GitHub and run the `apm-security-scan.yml` workflow.
 
-![Run workflow](../images/lab-06/lab-06-run-workflow.png)
+![Run workflow](../../images/lab-06/lab-06-run-workflow.png)
 
 ## Exercise 2: View Findings in Security Tab
 
@@ -32,7 +32,7 @@ After the workflow completes, visit each demo app's Security > Code scanning tab
 https://github.com/devopsabcs-engineering/apm-demo-app-001/security/code-scanning
 ```
 
-![Security tab findings](../images/lab-06/lab-06-security-tab.png)
+![Security tab findings](../../images/lab-06/lab-06-security-tab.png)
 
 ## Exercise 3: Triage Findings
 

labs/lab-07-ado-pipelines/README.md

@@ -24,7 +24,7 @@ description: "Build a multi-engine APM Security scan pipeline in Azure DevOps YA
 Get-Content .azuredevops\pipelines\apm-security-scan.yml
 ```
 
-![ADO scan pipeline](../images/lab-07-ado/lab-07-ado-scan-pipeline.png)
+![ADO scan pipeline](../../images/lab-07-ado/lab-07-ado-scan-pipeline.png)
 
 ## Exercise 2: Create the Pipeline in ADO
 

labs/lab-07-github-actions/README.md

@@ -26,7 +26,7 @@ description: "Build a multi-engine APM Security scan pipeline in GitHub Actions
 Get-Content .github\workflows\apm-security-scan.yml
 ```
 
-![Scan workflow](../images/lab-07/lab-07-scan-workflow.png)
+![Scan workflow](../../images/lab-07/lab-07-scan-workflow.png)
 
 ## Exercise 2: Review the Gate Workflow