Card lifecycle status and wipe-for-reuse support

BoltCards now have a full lifecycle state: unprogrammed, programmed, lost, damaged, and wiped. Each state transition is logged in a card activity history. Admins can wipe a card’s cryptographic keys via a QR code, returning it to a blank state so it can be re-issued to another participant without requiring a new card.

A card replacement flow distinguishes between lost/damaged (with a configurable fee deducted from the participant’s balance) and wipe-for-reuse. Users can be deleted independently of their card.