Payment is more of tamper resistance and trust problem than protocol problem. You don't want a hackable card tied to your credit.

You can't really, unless you get involved in the financial systems afaik. It's not just some open thing that anybody can implement; there's a chain of trust involved and for good reason.

Maybe you could reverse-engineer HCE from bank Android app, but that would be rather fragile.