feat(recharge): unify secure card payment flows

[MuxYang]

Summary

• Unify the campus-card recharge UI for Agricultural Bank, China Merchants Bank, and Alipay; remember the selected method and remove the legacy CMB entry and setting.
• Keep CMB WebView automation hidden with idle preload, a three-minute validity window, duplicate-load prevention, strict HTTP 412 recovery, password-first execution, and one-shot expired-session recovery.
• Protect payment-password screens with FLAG_SECURE and a shared optional built-in numeric keyboard; disabling it restores the system password keyboard.
• Polish dropdowns, Alipay behavior, three-second result reset, Monet/custom theming, and the white logo backing.

Verification

• Based on upstream commit 3d24b54.
• Ran :app:testDebugUnitTest and :app:assembleDebug offline: 159 tests, 0 failures, 0 errors, 0 skipped.
• Installed and launched 3.2.2-debug on a Pixel 9 Pro running Android 17 (API 37); no crash entries observed.
• Verified the recharge dropdown, Alipay state, secure-keyboard setting, system theme colors, and logo rendering on device.