Catatan:
- Signature: HMAC-SHA256(secret, ts + "|" + origin).
- Header wajib: x-app-ts dan x-app-secret.
- Delay 500ms antar request biar ga kena rate limit.
- User-agent di-random tiap request.