Documents the signature scheme: HMAC-SHA256 over host:path:query:width:height:format:expiration with base64url encoding and Unix timestamp expiration.