TOTP_WINDOW_SECONDS

Width of one beacon-token rotation window, in seconds.

Compatible with RFC 6238 TOTP step semantics. 30 seconds is the same window used by Google Authenticator et al. — short enough that captured beacons expire quickly, long enough that ordinary clock skew across a LAN doesn't desynchronise senders and receivers.