Add a card on file by reading the card at the terminal and tokenizing it. Uses the gateway's token-only endpoint: the card is never authorized or charged, so — unlike a real auth — there is no hold to release afterwards and nothing to void.