fix(dev): cards-server uses --hot + setup-databases creates mana_notify/credits

cards-server: switch from `bun run --watch` to `bun run --hot`.
--watch restarts the whole process on file change, racing the
old + new Bun.serve calls for the port (the EADDRINUSE you see
right after `listening on :3072`). --hot does in-process HMR via
the globalThis[hmrSymbol] pattern; the port stays bound across
reloads. apps/api already uses --hot for the same reason.

scripts/setup-databases.sh:
- create_db_if_not_exists "mana_notify" + "mana_credits" so a
  fresh-machine `pnpm setup:db` no longer leaves these two DBs
  off (mana-notify was crashing on boot with SASL fallback,
  mana-credits was less obvious because its drizzle config
  defaults to mana_platform — but the runtime config can point
  at mana_credits, so safer to have the DB exist).
- Fix the cards branch: was pointing at the non-existent
  @mana/cards-database package; now points at @mana/cards-server
  where the actual schema lives.

Verified: drop+re-create flow + cardecky:full boot + touch-trigger
hot-reload all clean.

package.json

@@ -69,7 +69,7 @@
 		"dev:cards:web": "pnpm --filter @cards/web dev",
 		"dev:cards:landing": "pnpm --filter @cards/landing dev",
 		"dev:cards:app": "concurrently -n api,web -c yellow,cyan \"pnpm dev:api\" \"pnpm dev:cards:web\"",
-		"dev:cards-server": "cd services/cards-server && bun run --watch src/index.ts",
+		"dev:cards-server": "cd services/cards-server && bun run --hot src/index.ts",
 		"dev:cardecky:full": "concurrently -n auth,sync,credits,notify,server,web -c blue,magenta,green,gray,yellow,cyan \"pnpm dev:auth\" \"pnpm dev:sync\" \"pnpm dev:credits\" \"pnpm dev:notify\" \"pnpm dev:cards-server\" \"pnpm dev:cards:web\"",
 		"dev:picture:web": "pnpm --filter @picture/web dev",
 		"dev:picture:landing": "pnpm --filter @picture/landing dev",