Remove boxplot from _dataframe_apply_whitelist
This is a piece of #17179, which is being broken up into smaller chunks.

- [ ] closes #xxxx
- [ ] tests added / passed
- [ ] passes `git diff upstream/master -u -- "*.py" | flake8 --diff`
- [ ] whatsnew entry
