Function retry_after_seconds 

pub fn retry_after_seconds(not_until: &NotUntil<QuantaInstant>) -> u64

Returns the retry delay in whole seconds for a governor rejection.

Sub-second waits round up to one second so clients never see a zero delay that invites an immediate retry.