libhdfs++: FileSystem should not take ownership of IOService

The ctor for the filesystem currently takes ownership of the IOService passed in. There is a valid use case for a single IOService for multiple FileSystems (e.g. for different users).

If an IOService is passed in, the consumer should be responsible for its lifetime.