What are Server Actions in React 19, how are they exposed as HTTP endpoints under the hood, and what security mistakes must you avoid?

Server Actions are like magic buttons that let you send a secret message to a computer far away to do something, like save a drawing. But if you're not careful, someone might trick the magic button into doing something bad, so you have to make sure only the right people can press it.