Add a diagram that demonstrates UCAN use in the wild

[jeffgca]

Source material:

• This spec issue
• This blog post

Goal: make it clearer how a UCAN-authorized invocation differs from other methods, and bonus round also address the need for token tracking on the server side to prevent DOS attacks.