The documentation for
UrlFetchApp.fetch() describes the optional
parameters you can use. Set the parameter
method to "post" to
send a POST request instead of a GET.
You can use
Utilities.computeHmacSignature() to sign
the request, although figuring that out will likely be tricky.
As for a nonce, it's probably enough to use the current timestamp,