create: Let card re-entry catch a wrong card #140

When a re-entered card doesn't match, the CLI marks the wrong groups and asks the operator to retype them from the card (_confirm_card in cli.py). That assumes the card is right and the typing is wrong.

If the card itself was written wrong, there is no way forward. The screen and its scrollback were cleared, so the correct text can't be seen, and the only exit is to abandon the ceremony. The GUI read-back in #109 also keeps the original hidden.

A tester suggests:

1. After a mismatch, ask whether the marked group on the card matches what was typed.
2. If it does, the card is wrong. Show the correct text for that group so the card can be fixed.
3. Then require the whole card to be re-entered from the card.

Showing correct text after the clear changes what confirmation proves. The guide already says confirmation "cannot prove that the physical backup was corrected rather than reconstructed using confirmation feedback". So this needs a security review.