server: handle card locked state from panda

[nfmelendez]

panda can lock a user's card (e.g. entering the wrong pin too many times, or a lock applied through the panda api), but we have no representation of that state

proposal

• persist the locked status when panda reports it (webhook / api)
• surface the locked state in the ui so the user understands why transactions decline

references

• slack thread: https://exactlyprotocol.slack.com/archives/C05SNC75RPD/p1785430915084889

[coderabbitai]

🔗 Related PRs

#1186 - 🐛 server: fix forwarded card webhook status [open]

---

📝 Issue Planner

_{Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.}

• Create Plan

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!