URI scheme: add user URLs section

With preliminary context-dependent vs context-independent distinction.

Also add a bunch of TODO (remove/rename, mostly) about API URLs that
need to be acted upon.