Short answer: create a BOLT11 invoice with blinded paths and wrap it with lnproxy.
Be careful with BOLT12 on CLN! If it doesn't find a suitable "blinded path" with nodes that support routing BOLT12 messages, it will default to your nodes pubkey! I was very surprised to experience this... You can double check by decoding the invoice and checking that your pubkey is not there.
And then a custodial option but with probably the best privacy, cashu. But that's another topic...
Short answer: create a BOLT11 invoice with blinded paths and wrap it with lnproxy.
Be careful with BOLT12 on CLN! If it doesn't find a suitable "blinded path" with nodes that support routing BOLT12 messages, it will default to your nodes pubkey! I was very surprised to experience this... You can double check by decoding the invoice and checking that your pubkey is not there.
And then a custodial option but with probably the best privacy, cashu. But that's another topic...
You might be interested on #1494067 and #1495707.