Timer relay with three buttons

I agree with vffgaston that the emergency stop should be hardwired separate to the arduino.

I am interested how you get on with this though as a have a totally different project but using similar principles.