Generic HMAC signer driven by v4 auth.sign_recipe data.
The executor reads canonical string components, crypto operation, signature placement, auth headers, nonce/timestamp formats, and pre-sign transforms from the complete owned runtime spec. It executes authored data and does not classify venues or select a long-tail fallback signer.