Permanently cancels a card. Unlike suspend, a cancelled card cannot be reactivated.

Business Context: Used when permanently deactivating a card (e.g., employee termination, compromised card). The card is removed from the available cards list in the frontend but remains in the system for audit purposes.