Signed download urls cli (Security)

Goal

Demonstrate "signed download urls (cli)" against the Tinybox security surface end to end.

Walkthrough

# Step 1 — prepare a bucket for the security workflow.
tinybox buckets create my-bucket --region us-east-1

Apply the recipe; verify with the API reference under API reference.