TOTP_ WINDOW_ SECONDS
Width of one beacon-token rotation window, in seconds.
Compatible with RFC 6238 TOTP step semantics. 30 seconds is the same window used by Google Authenticator et al. — short enough that captured beacons expire quickly, long enough that ordinary clock skew across a LAN doesn't desynchronise senders and receivers.