Ja! Ich habe den 2. Schritt herausgefunden!
url = "<my_site>/users/<username>/preferences/avatar/pick.json"
data={
"upload_id": "<id_from_the_1st_step>",
"type": "uploaded"
}
response = requests.request("PUT", url, headers=headers, data=data)
Ich liebe es! 