KESL 12.1.0-1297 image, Ubuntu 24.04 base, transparent UX

- Pinned download URL for KESL 12.1.0-1297 (public Kaspersky CDN, 2024-07).
- answer.txt updated to v12 autoinstall format: GROUP_CLEAN required,
  LOCALE=en_US.utf8 (en_US alone is rejected), INTERCEPTOR_MODE.
- start.sh detects v10 (/etc/init.d/kesl-supervisor) vs v12
  (/etc/init.d/kesl) and polls kesl-control until the daemon answers,
  because v12's first start runs an integrity check (~30s).
- Modes (shell/version/scan/debug) and scan output format unchanged so
  existing parsers keep working.
- README + build script point to tabledevil/kaspersky12.
- test_smoke.sh validates image + version + EICAR; auto-skips on macOS
  (Rosetta blocks the daemon).

Validated end-to-end on amd64 Linux:
  - 46 known-malicious files (LS26 detections) all flagged again
  - DetectSource=Local with --network=none + USE_KSN=No, no KSN calls

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

dockerkaspersky_build_and_push.sh

@@ -1,8 +1,7 @@
 #!/bin/bash
-build_date=$(date +%Y%m%d)
-docker build --no-cache -t "tabledevil/kaspersky:${build_date}" -f Dockerfile .
-docker login
-docker push "tabledevil/kaspersky:${build_date}"
-docker tag "tabledevil/kaspersky:${build_date}" "tabledevil/kaspersky:latest"
-docker push "tabledevil/kaspersky:latest"
-
+# Build amd64 KESL 12 image. On Apple Silicon you MUST use buildx.
+set -e
+TAG="${TAG:-tabledevil/kaspersky12}"
+docker buildx build --platform linux/amd64 --load -t "$TAG" .
+echo "Built $TAG (linux/amd64)"
+echo "Push with: docker push $TAG"