The Biometric Trap: Why Dispensary ID Scanners Are Triggering Devastating Privacy Lawsuits