Contract–facility link cleanup

Removes the link between a contract and a facility's security systems — the rows in contract_facility_security_system created by POST /api/contract/link/{contract_id}. The contract and the facility themselves are left untouched. Always dry-run first.