Bind the received PAN to the application holder; irreversible. Query operation after ambiguous results.

Permission: card.physical.operate. Prerequisites: shipped application, actual receipt, end-user identity verification and eligible HTTPS activation-code webhook. Binding is irreversible. Encrypt ApiPhysicalBindPayload using CardDataEncryption (API Key-derived AES-256-GCM); send encrypted/iv/tag, no plaintext or challenge request. Next: query /cards/physical/operation and receive card.physical.activation.code. Both successful binding and the code are required before activation; do not rebind on pending/unknown.