Decision-based Black-box Attack Against Vision Transformers via Patch-wise Adversarial Removal