Review feedback

Co-authored-by: Sam Barker <sam@quadrocket.co.uk>
Signed-off-by: Robert Young <robertyoungnz@gmail.com>

Author: robobario

_posts/2026-04-01-release-0_20_0.md

@@ -21,19 +21,16 @@ Thanks to the work of [May-Abo](https://github.com/May-Abo), a new filter joins
 
 Multi-tenancy gets even better with the Entity Isolation filter. Initially supporting `groupId` and `transactionalId` entity types, this filter helps you enforce isolation boundaries between tenants sharing a cluster.
 
-### Apicurio v3 Upgrade
+### Record Validation Filter - Apicurio v3 Upgrade
 
-Record validation just got a major upgrade with Apicurio v3. The default schema identification has changed from `globalId` to `contentId` for better interoperability with Confluent-based Kafka clients. To support migrations you can still use the old behavior by setting `wireFormatVersion` to `V2`, though this mode is deprecated and will be removed in a future release.
+- Record validation just got a major upgrade with Apicurio v3. The default schema identification has changed from `globalId` to `contentId` for better interoperability with Confluent-based Kafka clients. To support migrations, you can still use the old behavior by setting `wireFormatVersion` to `V2`, though this mode is deprecated and will be removed in a future release.
+- The schema validation filter can now connect to a schema registry protected by internally signed TLS certificates. One less obstacle for air-gapped or enterprise environments.
 
 ### Kubernetes Operator Enhancements
 
 Two improvements for Kubernetes users:
-- **Server-Side Apply**: The operator now uses Server-Side Apply for all dependent resources. Existing deployments are unaffected, and externally-applied patches (like annotations from observability tooling) will now survive operator reconciles.
 - **OpenShift Route Support**: Enable external access to Virtual Clusters via OpenShift Routes using `KafkaProxyIngress.spec.openShiftRoute`. Off-cluster client access is now a breeze on OpenShift.
-
-### Schema Validation with Internal Certificates
-
-You can now use schema validation with a schema registry protected by internally signed TLS certificates. One less obstacle for air-gapped or enterprise environments.
+- **Server-Side Apply**: The operator now uses Server-Side Apply for all dependent resources. Existing deployments are unaffected, and externally-applied patches (like annotations from observability tooling) will now survive operator reconciles.
 
 ### Javadocs on the Website