mmmh, still hard to give exact numbers, but let's extrapolate a little (please don't hang me for the exact numbers, trying to estimate a ballpark here): So generally the OTPs will have to share the available memory with the password manager, means let's estimate password manager entries with an OTP secret. Let's assume each entry has a name (64bytes), a username (64bytes), a password (64bytes), a OTP secret (80bytes) and some meta info (8bytes) - this gives us ~300bytes for each entry - further let's assume we only use 1MB of the existing external NAND then dividing 1MB / 300bytes already leads to ~3500 entries ... In reality this likely will not be reached (let's see), being defensive with this ballpark - 1000 entries (thus OTPs) seem to be realistic ... again: this is no promise, maybe I miss something, maybe we need to increase sizes, or decrease them, just to give you a feeling where this is going...
Fill in the blank.