Many businesses assume their surcharge program automatically excludes debit cards. That assumption can create compliance problems, customer complaints, and unnecessary risk. Here's what merchants need to know.