feat: withdraw all QR codes when one is withdrawn

[link2xt]

This is a preparation for expiring authentication tokens.

If we make authentication token expire,
we need to generate new authentication tokens each time QR code screen is opened in the UI,
so authentication token is fresh.
We however don't want to completely invalidate
old authentication codes at the same time,
e.g. they should still be valid for joining groups, just not result in a verification on the inviter side.

Since a group now can have a lot of authentication tokens, it is easy to lose track of them
without any way to remove them
as they are not displayed anywhere in the UI.
As a solution, we now remove all
tokens corresponding to a group ID
when one token is withdrawn,
or all non-group tokens
when a single non-group token is withdrawn.

"Reset QR code" option already present
in the UI which works by resetting
current QR code will work without any UI changes,
but will now result in invalidation
of all previously created QR codes and invite links.

[link2xt]

This is needed for #7140

Most users likely don't know anyway that they can reset individual QR codes by scanning their own QR codes. Original idea was that you can print QR codes and then enable/disable them separately, but there is no overview of it anyway and this is not how invite links work in other messengers where there is usually only one invite link and it is even shared between all members so one inviter resetting a link invalidates it for everyone.

I also thought about getting rid of withdrawing QR codes completely and having a dedicated "reset invite link" API, but the advantage of the solution in this PR is that no UI changes are needed.

[link2xt]

Added some test.