Credit card issuers may think their biggest retention threat is another bank persuading a customer to open a new account. But the replacement card may already be sitting in the customer’s wallet.