Get Default Card For Lead

GET 
/api/forms/public/lead/:lead_id/default-card

PUBLIC endpoint — return display-only {card_brand, card_last4} for the contact's preferred saved card so the one-click upsell page can show "Visa ending 4242". No card id, Stripe id, or amount is returned.

The route is intentionally public (no auth) because the upsell page itself is public; the tenant is resolved from the lead row.

Request​