KESL 12.1.0-1297 image, Ubuntu 24.04 base, transparent UX

- Pinned download URL for KESL 12.1.0-1297 (public Kaspersky CDN, 2024-07).
- answer.txt updated to v12 autoinstall format: GROUP_CLEAN required,
  LOCALE=en_US.utf8 (en_US alone is rejected), INTERCEPTOR_MODE.
- start.sh detects v10 (/etc/init.d/kesl-supervisor) vs v12
  (/etc/init.d/kesl) and polls kesl-control until the daemon answers,
  because v12's first start runs an integrity check (~30s).
- Modes (shell/version/scan/debug) and scan output format unchanged so
  existing parsers keep working.
- README + build script point to tabledevil/kaspersky12.
- test_smoke.sh validates image + version + EICAR; auto-skips on macOS
  (Rosetta blocks the daemon).

Validated end-to-end on amd64 Linux:
  - 46 known-malicious files (LS26 detections) all flagged again
  - DetectSource=Local with --network=none + USE_KSN=No, no KSN calls

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

start.sh

@@ -1,7 +1,28 @@
 #!/bin/bash
+# Mirror of docker_kaspersky/start.sh — same modes (shell|version|scan|debug).
+# Output format kept similar to v10 so existing parsers work until renovated.
+
 function start_service() {
   echo -n "Starting Service... "
-  /etc/init.d/kesl-supervisor start && echo "Done!" || echo "Failed!"
+  # v10 uses /etc/init.d/kesl-supervisor, v12 uses /etc/init.d/kesl.
+  if [ -x /etc/init.d/kesl ]; then
+    /etc/init.d/kesl start >/dev/null
+  elif [ -x /etc/init.d/kesl-supervisor ]; then
+    /etc/init.d/kesl-supervisor start >/dev/null
+  else
+    echo "Failed (no init script)"; return 1
+  fi
+  # Poll until kesl-control can talk to the daemon (integrity check + sig load
+  # can take 30–60s on first start of v12).
+  for _ in $(seq 1 60); do
+    if kesl-control -S --app-info >/dev/null 2>&1; then
+      echo "Done!"
+      return 0
+    fi
+    sleep 2
+  done
+  echo "Failed (daemon did not become ready)"
+  return 1
 }
 
 case "${1}" in