Function sign 

fn sign(secret_id: &str, secret_key: &str, cur_time: u64) -> String

Builds the CLS Authorization header value for the current time. Faithful port of cls-sdk.lua’s sign(). cur_time (Unix seconds) is injected so the signature is unit-testable.