My hacking continues. I managed to create a zero-length media object at demo.rss.chat/media/23 (this is what happens when you forget the @ in the curl command). I suspect that eventually, endpoints for /deletemedia and /updatemedia will be needed.