chore：fix sign bug

Author: sdk-liuzhaoliang

volcengine-java-sdk-core/src/main/java/com/volcengine/sign/VolcstackSign.java

@@ -377,20 +377,16 @@ public Map<String, String> presign(Map<String, String> queryParams, String host)
             presignedParams.put("X-Security-Token", credentials.getSessionToken());
         }
 
-        // Re-collect all parameter keys (including X-Security-Token) to build canonical request
-        List<String> allKeys = new ArrayList<>(presignedParams.keySet());
-        Collections.sort(allKeys);
-
         // Build canonical request
         StringBuilder canonicalRequest = new StringBuilder();
         canonicalRequest.append(this.method);
         canonicalRequest.append("\n");
         canonicalRequest.append("/");
         canonicalRequest.append("\n");
 
-        // Canonical Query String - concatenate all parameters after sorting
+        // Canonical Query String - only include keys listed in X-SignedQueries
         StringBuilder canonicalQueryString = new StringBuilder();
-        for (String key : allKeys) {
+        for (String key : queryKeys) {
             canonicalQueryString.append(signStringEncoder(key));
             canonicalQueryString.append("=");
             canonicalQueryString.append(signStringEncoder(presignedParams.get(key)));