Firm with links to Gove and Cummings given Covid-19 contract without open tender