PEP 752: Address feedback, round 1

[ofek]

1. Changed most uses of the word "package" to "project".
2. Explicitly state that PEP 708 does not offer protection against these types of dependency confusion attacks.
3. Changed the semantics to be based on the project rather than individual artifacts. It appears it's more useful to consider the current namespace permissions rather than if a version was part of the namespace at the time of release.
4. As a consequence of 2, removed recommended fields in the Simple API.
5. Added optional top-level owner and namespace keys to the JSON API.
6. Added NPM-style scoping explicitly as a rejected idea and enumerate all of the rationale.
7. Rather than giving permission to users, made it clear that authorization for uploads is about identical project and grant owners.
8. Made it clear that private root grants may create public child grants and the reverse is only possible when the owner also happens to own every project that matches the namespace.
9. PEP 752: Add more examples #3912 (comment)

---

📚 Documentation preview 📚: https://pep-previews--3916.org.readthedocs.build/

[warsaw]

I have a couple of small questions.