At least half of your bulleted list is actionable. Your lab should have an employee concerns program that accepts anonymous input, but if they don't the DOE certainly does: https://www.energy.gov/ehss/doe-employee-concerns-program

Specifically it should not be possible to 'informally justify' a hire; at the very least this is a contract violation.