Signs a SOAP envelope's Body and Timestamp with a WS-Security header carrying a detached XML-DSig signature (RSA-SHA256, exclusive-C14N), as expected by WSS4J-based gateways. Vendor-agnostic: key, cert, token id, C14N prefix list and timestamp TTL are all supplied by the caller.