docs: apply CI-rendered README for the amended HISTORY entries

Author: gonzalesedwin1123

spp_api_v2/README.rst

@@ -158,11 +158,17 @@ Changelog
 - Auth middleware: replace the plain ``HTTPBearer`` scheme with an
   OAuth2 client-credentials security scheme so the OpenAPI document
   advertises the token endpoint and consumers (Swagger UI, QGIS, etc.)
-  can discover how to authenticate; strip the ``Bearer`` prefix from the
-  raw Authorization header value
-- Bundle schemas: document ``BundleEntry.resource`` as a polymorphic
-  Individual/Group body instead of an opaque dict, so bundle payloads
-  are fully described in the OpenAPI document
+  can discover how to authenticate. The advertised ``tokenUrl`` is
+  absolutized against the endpoint's mount path at generation time so
+  strict RFC 3986 clients resolve it correctly. The ``Bearer`` prefix is
+  stripped from the Authorization header when present; a raw token
+  without the prefix is also accepted
+- Bundle schemas: registrant-serving endpoints document bundle entries
+  as polymorphic Individual/Group bodies via new
+  ``RegistrantBundle``/``RegistrantBundleEntry`` subtypes, so their
+  payloads are fully described in the OpenAPI document; the shared
+  ``BundleEntry`` stays generic because other modules reuse it for
+  non-registrant resources
 - Add OpenAPI contract tests covering bundle schema rendering, the
   polymorphic utilities, and the overall OpenAPI document contract
 

spp_api_v2/static/description/index.html

@@ -539,11 +539,17 @@ <h3><a class="toc-backref" href="#toc-entry-2">19.0.2.1.0</a></h3>
 <li>Auth middleware: replace the plain <tt class="docutils literal">HTTPBearer</tt> scheme with an
 OAuth2 client-credentials security scheme so the OpenAPI document
 advertises the token endpoint and consumers (Swagger UI, QGIS, etc.)
-can discover how to authenticate; strip the <tt class="docutils literal">Bearer</tt> prefix from the
-raw Authorization header value</li>
-<li>Bundle schemas: document <tt class="docutils literal">BundleEntry.resource</tt> as a polymorphic
-Individual/Group body instead of an opaque dict, so bundle payloads
-are fully described in the OpenAPI document</li>
+can discover how to authenticate. The advertised <tt class="docutils literal">tokenUrl</tt> is
+absolutized against the endpoint’s mount path at generation time so
+strict RFC 3986 clients resolve it correctly. The <tt class="docutils literal">Bearer</tt> prefix is
+stripped from the Authorization header when present; a raw token
+without the prefix is also accepted</li>
+<li>Bundle schemas: registrant-serving endpoints document bundle entries
+as polymorphic Individual/Group bodies via new
+<tt class="docutils literal">RegistrantBundle</tt>/<tt class="docutils literal">RegistrantBundleEntry</tt> subtypes, so their
+payloads are fully described in the OpenAPI document; the shared
+<tt class="docutils literal">BundleEntry</tt> stays generic because other modules reuse it for
+non-registrant resources</li>
 <li>Add OpenAPI contract tests covering bundle schema rendering, the
 polymorphic utilities, and the overall OpenAPI document contract</li>
 </ul>