feat: prioritize query token extractor

src/Security/JWT/Extractor/ChainTokenExtractor.php

@@ -16,9 +16,9 @@ final class ChainTokenExtractor implements PSR7TokenExtractorInterface
      */
     public function __construct(
         private iterable $tokenExtractors = [
+            new QueryTokenExtractor(),
             new CookieTokenExtractor(),
             new AuthorizationHeaderTokenExtractor(),
-            new QueryTokenExtractor(),
         ],
     ) {
     }