issue #23982: get credit cards back working in mobile

The reasons this is superior to the `populate_xt_data` in `inventory`:
-No hardcoding of the encryption key = the data won't look like junk
-No hardcoding of the admin user
-The data gets inserted *after* the ORMs are set up