[Manager]
# Pet the hardware watchdog every 30s so the host doesn't reboot mid-audit.
# Kernel watchdog timeout is typically 60s; 30s gives a safe 2× margin.
RuntimeWatchdogSec=30s