S3 Auth: SigV4, Presigned URLs, and Key Decoupling

Query-string SigV4 for presigned URLs, mandatory X-Amz-Date freshness, and decoupling gateway access/secret keys from the native auth token.

🏛 ARCHITECTURE•S3•August 11, 2026•3 min