Add `RemoveJwtBearerQueryStringBehavior` implementation

[carusology]

Background

As an alternative to "redacting" tokens from query strings, we can also remove them entirely. This will hide from the logs that a token was included at all, which may be more helpful than saying that it was included but we are redacting it from view.

Task

• Add a RemoveJwtBearerQueryStringBehavior implementation of IJwtBearerQueryStringBehavior that removes the token from the query string if it is found.
• Update QueryStringBehaviors to have a new immutable Remove property that returns this behavior.