In my opinion the high level feedback can work similarly to the charge pump circuit. The HLFB tells the software everything is OK on the servo. The enable circuit tells the servo's that everything is OK on the software.
1 relay external to the MB2 to run your water pump is all the extra relay's you need.
The Z axis is not heavy enough to backdrive the ballscrew and descend downward if power is removed. No brake is needed to hold it in position.
Also, This might be the source of some of confusion around contactors and servo's: Typical servo's use a driver that mounts in the control cabinet and they send power and direction data down a cable to the servo motor. AC servo's can send 220V down this cable. I understand the need for a safety contactor in this application that would go between the servo driver and the servo motor to cut all power from the driver. And I imagine most instruction manuals for BOB's probably use this typical servo set up as examples of integrating safety circuits, contactors etc. ClearPath servo's are entirely different. The driver is mounted directly to the back of the motor. No way to put a contactor between the driver and the motor. For safety circuit purposes its probably easier to think of it as a glorified stepper motor with an enable circuit. Cut the enable circuit and the drive is entirely disabled.