eqosys: drop ?token= from socketToken once the iOS kit release with subprotocol auth ships #4115

Follow-up to #3726 (PR #4114). The iOS kit now opens the hub socket offering the subprotocols eqosys and the token, like the web pages. Once a RustyBunsKit release with that ships (and the apps that use it update), drop the ?token= fallback from socketToken in apps/eqosys/src/handle.ts so a token can never ride in a URL. Check first that nothing else still opens /hub, /q/party/<code> or /q/space/<id> with ?token= (grep the repo for token= next to those paths).