Create a new trigger rule that can detect if a contractor organization has no contract on file.

Current triggers only work if an organization has a contract - we need to deny access if there is no contract or if all contracts are expired/not valid/not active/etc.

It might also make sense to add contract "types", so that be used by a trigger as well. For example, if no "Contract Type A" exists or is expired, deny entry and send an email.