* Remove the "action" keys in request bodies, and substitute for explicit end-points.  This feels much more
  REST-ish.  This is for both the publishing and file upload sessions.
* Add an `authentication` cross-reference anchor.
* Add a Recommendations for Client Implementers section for how clients like twine, uv, and GitHub
  actions *might* utilize the PEP 694 API.
* Update the Change Log accordingly.