Reference bot flow: private key signs L1 headers, creates or derives API creds, then posts signed orders with L2 auth.