Single-use nonce (UUID) tying this signature to one request; the server rejects reuse.
HMAC_SHA512(signingSecret, canonicalString) as lowercase hex.
Signing timestamp in epoch milliseconds (string). Must be within the server's freshness window (±5 min).
The three headers the platform expects on every signed request.