// hooks.server.ts intentionally minimal — CSRF is handled natively by SvelteKit
// when the Origin header matches the request Host. For multi-domain setups,
// trusted origins are declared in svelte.config.js via kit.csrf.checkOrigin / allowedOrigins.
export {};