Score Merge Candidates

LLM-score the org's unscored review-lane duplicate candidates and persist a {verdict, confidence, rationale} onto each contact_merge_candidates row. org_id/user_id come from the auth token — the body never carries org (no cross-org scoring). Idempotent: only rows with a null llm_verdict are scored.