listDoorCards (door.operate, service client, masked last4 only) lists active cards with the slot each holds on a connection. /door/manage now passes canOperate (door.operate rpc) and, when set, shows per-connection Open/Unlock/Lock and an expandable card list with Grant/Revoke. Every live action is behind a confirm; grant shows the allocated slot.