Add 20 honeypot services: email, DB, ICS, cloud, IoT, network protocols

Tier 1 (upstream images): telnet (cowrie), smtp (mailoney),
elasticsearch (elasticpot), conpot (Modbus/S7/SNMP ICS).

Tier 2 (custom asyncio honeypots): pop3, imap, mysql, mssql, redis,
mongodb, postgres, ldap, vnc, docker_api, k8s, sip, mqtt, llmnr, snmp,
tftp — each with Dockerfile, entrypoint, and protocol-accurate
handshake/credential capture.

Adds 256 pytest cases covering registration, compose fragments,
LOG_TARGET propagation, and Dockerfile presence for all 25 services.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

decnet/services/elasticsearch.py

@@ -0,0 +1,23 @@
+from decnet.services.base import BaseService
+
+
+class ElasticsearchService(BaseService):
+    name = "elasticsearch"
+    ports = [9200]
+    default_image = "dtagdevsec/elasticpot"
+
+    def compose_fragment(self, decky_name: str, log_target: str | None = None) -> dict:
+        env: dict = {
+            "ELASTICPOT_HOSTNAME": decky_name,
+        }
+        if log_target:
+            env["ELASTICPOT_LOG_TARGET"] = log_target
+        return {
+            "image": "dtagdevsec/elasticpot",
+            "container_name": f"{decky_name}-elasticsearch",
+            "restart": "unless-stopped",
+            "environment": env,
+        }
+
+    def dockerfile_context(self):
+        return None