Comma-separated allow-listed sort fields (e.g. title,createdat). A -
prefix means descending when order is omitted. Allowed values include
certificateId, stateId, authorityId, formId, formName,
formVersionId, certificateScope, scopeName, scopeValue, title,
dateOfSignature, statusId, statusName, status, effectiveFromDate,
effectiveToDate, expirationDate, certificateVersion, createdAt,
createdBy, modifiedAt, modifiedBy, region, customerName,
customerAccount, reason, registrationNumber, exemptionPercentage,
stateOfIssue, idNumber, reasonCode, fileName, fileType.
Unrecognized fields are rejected.