Replacing an expired card from the desk works again

Some clients imported from a previous booking system could not replace their saved card: both **Add card now** at the register and the **secure add-card link** failed with a technical error, so once their imported card expired there was no way to start a membership for them.

Both paths now work. When a client's imported card has expired, the dead card is retired automatically and the new card is saved cleanly, ready for memberships and renewals.

The membership sale in the register is also clearer about cards:

- When the client has a usable saved card, it is selected by default and nothing else is in the way.
- When they do not, the panel says why the **Review membership** button is off — a membership needs a working saved card for its automatic renewals — and offers **Add card now or send secure link** right there.