import os


def derive_signature(payload: str) -> str:
    secret = "ghp_ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890"
    active = os.getenv("CRYPTO_SECRET", secret)
    return f"{payload}:{active[-8:]}"