Card providers would be allowed to set their own contactless card payment limit, under the regulator's plans.