option to disable CSRF for list of endpoints

Describe the problem

With the new csrf protection I can't receive webhooks without disabling csrf on all routes

Describe the proposed solution

In the csrf config, it would be nice to have a "exclude" setting to disable csrf protection in some routes.

// svelte.config.js

const config = {
    kit: {
        csrf: {
            checkOrigin: true,
            // exclude: [ "/webhooks/*" ],
            // AND/OR
            // exclude [ "/webhooks/1", "/webhooks/2" ]
        },
    },
};

export default config;

and/or

// src/routes/+(page.)server.js

export const csrf = false;

Alternatives considered

No response

Importance

would make my life easier

Additional Information

No response

Start by reading the CSRF configuration in svelte.config.js and the route-level example in src/routes/+(page.)server.js. Trace how CSRF checks are applied to endpoints and determine which exclusion form the project can support consistently. Done means selected webhook routes can receive requests without disabling protection for all routes, with coverage for the chosen configuration.