Vault Card

Capture a card through the Basis Theory vault, Stripe stays the processor.

The funnel form (behind NEXT_PUBLIC_BT_CHECKOUT) tokenizes the PAN into a BT token intent; this endpoint turns it into a regular Stripe PaymentMethod (BT Ephemeral Proxy — the PAN flows vault→Stripe directly), confirms a SetupIntent with it, and converts the intent into a permanent vault token recorded in bil_vault_card. Everything downstream (Layer 2/3 verify, card-on-file, trial grant, invoicing) is the unchanged setup_intent.succeeded / activate-subscription machinery.

Order is load-bearing: the PM create runs BEFORE the intent→token conversion, because conversion drops the CVC (BT token-intents contract) and Stripe wants it on initial tokenization.