Mobility operator service capacity sharing contract design to risk-pool against network disruptions