Body hash in canonical request was using hex encoding but auth-service
expects base64. This caused all signature verifications to fail.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>