mod_cache: Parse comma separated Cache-Control directives again.

[arturobernalg]

cache_strqtok() did not end a token at a comma or whitespace unless an argument followed, so "private, no-store" was read as one token and the response was stored. Stop at any non-token character, after the '=' test. BZ 70028.

---

• [X ] This PR does not report or address a security vulnerability
  (see SECURITY.md and
  https://www.apache.org/security/#reporting-a-vulnerability).
• [X ] Code follows the httpd style guide.
• [X ] New log messages (level debug or higher) use an empty APLOGNO() tag;
  numbers are assigned by a committer at merge time (see docs/log-message-tags/README).
• [X ] If the change is user-visible, a changes-entries/*.txt file is included,
  following the template in README.CHANGES (not needed otherwise).
• [X ] Test cases based on pyhttpd are included where appropriate, in the
  test/modules/xxx directory matching the modules/xxx module source,
  or test/modules/core for core server changes. On Unix, verify these
  pass locally with e.g. make check-pytest PYTEST_DIRS=test/modules/xxx.

[notroj]

Since this is a trunk-specific regression it doesn't need a changes-entry. This broke somewhere in the r1856507 / r1856500 / r1856493 sequence? It would be good to reference that in the commit message.

Otherwise LGTM