Issue #23459 Issue #23937 Support external pre-auths with no card_id.

@gilmoskowitz 
This adds the pkey and a constraint. How/where do I add the precheck in package.xml to verify a database conforms to this new constraint before upgrades are ran with the updater?