Attach a company to a contract. The contract must be writable by your token; the participant must be readable and belong to your team. Repeated attachment updates the existing participant without duplicating it. Omitted role/primary fields preserve their values; null roleId clears the role. Invalid writes are rolled back. Find role IDs with GET /api/partner/contractContactRoles.