Investigate using another signing package

This functionality seems independent enough that offloading it to someone else, or pulling it out into its own package just for our own use, might be a good idea.

https://npmjs.org/package/aws-sign maybe?

Review the repository’s existing signing functionality, then compare its responsibilities with the proposed aws-sign package. Done means documenting a clear decision about adopting aws-sign or extracting a project-specific package; no source files or tests are identified in the issue.

Written by the indexing model from the issue text.