Update contact records for security coordinators before next report

Your simulation webhook submissions arrive without updated contact context, causing missed follow-ups and skewed training metrics. Coordinators get consolidated contact updates and simulation status so reports close before the next reporting cycle.