remove WhoAmI callers from client

[tgross]

In Nomad 1.5.0 (542b23e) we started using the ACL.WhoAmI RPC method from the client to allow clients to check Workload Identity tokens and not just ACL tokens. In Nomad 1.7.0, we broke this by accidentally changing the wire format of the WhoAmI RPC response. See #19555. We've fixed that in #19578, but there's a better long-term solution:

• Remove the ACL.WhoAmI callers from the client
• Have the client check WI tokens using the server public keys
• Un-deprecated ACL.ResolveToken. For non-WI tokens, have the client check with the server via ACL.ResolveToken

We'll want to keep the existing ACL.WhoAmI method for backwards compatibility, but it might also be a good idea to provide a HTTP endpoint for it to make it a useful debugging tool.

[tgross]

@schmichael pointed out in a sidebar discussion that we probably want to do this sooner rather than later, as the current implementation would make it easy to incorrectly change the code at https://github.com/hashicorp/nomad/blob/v1.7.2/nomad/structs/structs.go#L547 to check the claim expiration, which would be nil on the client.