I can't comment yet since I don't have 50 reputation points, but would like to know if something evolved regarding the GCP SDK side.

It would be great to use the StorageClient with the HMAC signed URL, and have access to all the great abstractions from it, instead of relying on normal HTTP client responses as in this previous example (downloading a file).