feat(vault-tui): create/edit cards in the add/edit form

The TUI `a`/`e` form now composes card (type 3) ciphers, not just logins
and secure notes. No backend change — it builds the `CardWrite` payload
that already rides `Request::Add`/`Edit` (CLI write path, PR #25).

- app.rs: the Type row cycles login → secure note → card; `blank_fields`
  / `visible_fields` grow the card rows (Holder/Brand/Number/Expiry/CVV,
  with Number+CVV masked while unfocused). `submit` splits a single
  `MM/YYYY` Expiry field via a local `parse_expiry` (mirrors the CLI's
  `split_expiry`) and packs the card fields into `FormSubmit` (number/code
  redacted in `Debug`). `new_edit` takes the cached `DetailView` and
  prefills Brand/Expiry; secrets and the (unfetchable) cardholder start
  blank = leave-unchanged.
- main.rs: `submit_form` builds `card: Option<CardWrite>` when the type is
  a card and threads it into both Add and Edit.
- Tests: card add carries split expiry + redacts secrets, card edit
  prefill/diff, `parse_expiry`; updated the type-toggle test for the
  3-way cycle.
- docs: README TUI card note, CHANGELOG entry.

Identity TUI editing stays pending — it needs an identity write backend
first (no `IdentityWrite`/`from_plain` identity path yet).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: UnbreakableMJ

CHANGELOG.md

@@ -10,6 +10,16 @@ range may break in any release.
 
 ### Added
 
+- **TUI card create/edit.** The `vault-tui` add/edit form (`a`/`e`) now composes
+  card (type 3) items, not just logins and secure notes. The **Type** row cycles
+  `login → secure note → card`; the card rows are cardholder/brand/number/expiry
+  (one `MM/YYYY` field, split on submit)/CVV, with number and CVV masked while
+  unfocused. On edit, brand/expiry prefill from the detail pane's on-select fetch
+  and secrets start blank (blank = leave unchanged). Builds the existing
+  `CardWrite` payload on `Request::Add`/`Edit` — no backend change. Identity TUI
+  editing stays pending (no identity write path yet). Tests: card add carries
+  split expiry + redacts secrets, card edit prefill/diff, `parse_expiry`.
+
 - **Create/edit card ciphers.** `vault add … --type card` and `vault edit`
   now build/update card (type 3) items: cardholder/brand/expiry via flags, the
   **number and CVV prompted on the controlling terminal** (`/dev/tty`, never

README.md

@@ -113,6 +113,11 @@ vault edit "My Visa" --expiry 05/2031 --code   # --code re-prompts the CVV
 (identities are read-only for now). Editing card fields on a non-card item is
 rejected.
 
+The TUI can also create and edit cards: press `a` and cycle the **Type** row
+with `Space` (`login → secure note → card`), or `e` on a selected card. The
+card's number and CVV mask while unfocused; on edit they start blank (blank =
+leave unchanged), and the brand/expiry prefill from the detail pane.
+
 ### PIN unlock
 
 For quick access without re-typing the master password, enroll a PIN (after an