New ID cards are supposed to be ‘unforgeable’ – but it took our expert 12 minutes to clone one, and programme it with false data