I reported this to HN a month ago:

https://social.mikutter.hachune.net/@mok/116208294430782702

BunnyCDN intentionally mis-writes any Mastodon request signing, as to make it incompatible with Mastodon.

And, they confirmed it's intentional.