Create HIPAA certs from re cert forms for contacts

Your re-certification responses aren't saved as HIPAA certificates, leaving compliance without proof. This creates certificate records linked to contacts so coordinators confirm completion same day.