Discuss whether we want an API routes audit status report

Problem/Motivation

Quoting @xjm:

Discuss whether the site owner should see a list or table on the page of the resources that are exposed. This is the user-facing complement of what /jsonapi provides developers, except possibly with additional info on whether it is read-only (e.g. config entities) or writable

This is closely related to #3039712: Discuss whether we want an entity access audit status report and if we do this, should probably result in the API routes for a given entity type+bundle to be listed alongside the access audit for every entity type+bundle. To make this as clear and informative as possible, this probably needs to list all API routes: those for core's rest.module, or contrib's relaxed.module, jsonapi.module or graphql.module should be listed alongside the access audit. This would make it very clear which operations are available on which routes on the site.

Proposed resolution

TBD

Remaining tasks

TBD

User interface changes

TBD

API changes

TBD

Data model changes

TBD

Release notes snippet

TBD