Store "Excluded URL paths" outside of config/project

Currently "Excluded URL paths" is stored in config/project, which means developer settings will overwrite any production values. This is fine for general settings, but doesn't make sense for excluded URLs because admins are making articles/pages and should be able to control what gets cached and what doesn't.