The Victorian government has been hit with a lawsuit by a security firm tasked with looking after 12 hotels used in the state’s troubled COVID-19 hotel quarantine program which seeks more than $9.7 million for allegedly unpaid invoices.