Possible contradiction in rules for naming source distribution files containing `-_.`

Issue Description

The specification page for source distributions states the following:

The file name of a sdist was standardised in PEP 625. The file name must be in the form {name}-{version}.tar.gz, where {name} is normalised according to the same rules as for binary distributions (see Binary distribution format), and {version} is the canonicalized form of the project version (see Version specifiers).

The name and version components of the filename MUST match the values stored in the metadata contained in the file.

The rules for binary distributions states that -_. should be replaced by _ in distribution names.

But the naming convention for core metadatas requires the package maintainer to follow this normalization, which states -_. should be replaced by -.

Hence, for a package named for instance "my-package" v0.1, the metadata specification would require the "Name" attribute in the metadata to be my-package, while the specification for source distribution files requires the name of the file to be my_package-0.1.tar.gz, making it impossible to follow this part of the source distribution filename specification: "The name and version components of the filename MUST match the values stored in the metadata contained in the file."

Code of Conduct

• I am aware that participants in this repository must follow the PSF Code of Conduct.

Compare the source distribution, binary distribution, core metadata, and name normalization specification pages linked in the issue, focusing on how each defines name normalization. Trace the example “my-package” through those rules and document a consistent resolution, updating the affected specification wording and references so the filename and metadata requirements no longer contradict each other.