clusterToken

PIN-derived rolling token (see krill.zone.shared.security.PinDerivation.deriveBeaconToken) proving cluster membership. Receivers MUST verify this against their own derivation before treating the sender as a swarm peer; mismatches indicate a beacon from a different swarm sharing the LAN.

Empty string is used during pre-pairing FTUE traffic.