Signature Construction Logic

Build the signing input in this exact order:

request_path
+ nonce
+ timestamp
+ base64url(raw_request_body)

Calculate HMAC-SHA256 with the API signature as the HMAC key, then Base64 URL encode the digest.