Drop `rpc_url` for JWT claims

[thedevbirb]

JWT claims allow to authenticate websocket connections to RPC to enable firewall delegations. Inside the JWT claim there is also the rpc_url so that it can be used only with the right recipient.
This is a bit redundant as JWTs are created with a very short expiry, plus the RPC can check on-chain whether the signalled URL matches.