Invalidate URLs

[Rich-Harris]

Picks up where #1280 left off. Fixes #1277, and also fixes a subtle bug where updating session wouldn't re-run load functions if maxage was used.

invalidate(url) calls are batched, so you can do things like urls.forEach(invalidate) without penalty.

Before submitting the PR, please make sure you do the following

• It's really useful if your PR references an issue where it is discussed ahead of time. In many cases, features are absent for a reason. For large changes, please create an RFC: https://github.com/sveltejs/rfcs
• This message body should clearly illustrate what problems it solves.
• Ideally, include a test that fails without this PR but passes with it.

Tests

• Run the tests with pnpm test and lint the project with pnpm lint

Changesets

• If your PR makes a change that should be noted in one or more packages' changelogs, generate a changeset by running pnpx changeset and following the prompts