The Department of Health and Human Services awarded a $10.2 million contract to a small firm to create a COVID-19 database. An NPR investigation finds unusual decisions made in the contract process.