Add incoming contact signals to risk vendor list

You get untracked contact signals about vendors and former employees, leaving compliance reviewers without verified context for risk checks. Capture and tag them into your risk list before review.