scd: Take the card look while running app->with_keygrip.

* scd/app.c (app_do_with_keygrip): Lock the card.

Better safe than sorry.

We should also review the card reference counting to see whether we
better ref the returned card object already here.

• Signed-off-by: Werner Koch <wk@gnupg.org>