Remove replace subtoken

[hach1yon]

#787

What Changed

change parse condition logic in order to remove unnecessary function and in order not to create unnecessary token instance.

Evidence

The testcases have passed.

[codecov]

Codecov Report

Attention: 13 lines in your changes are missing coverage. Please review.

Comparison is base (19c8c06) 82.18% compared to head (ff96069) 82.23%.

Files	Patch %	Lines
src/detections/rule/condition_parser.rs	86.86%	13 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1268      +/-   ##
==========================================
+ Coverage   82.18%   82.23%   +0.05%     
==========================================
  Files          27       27              
  Lines       24313    24241      -72     
==========================================
- Hits        19981    19935      -46     
+ Misses       4332     4306      -26     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[fukusuket]

I confirmed that there is no difference with 2.12.0 using the csv-timeline/json-timeline command :) LGTM!!🚀

[hitenkoku]

thanks for your pull request.
LGTM