The OpenAI agents that escaped a test environment and hacked Hugging Face accessed dozens of servers, obtained data and credentials, and used an improvised messaging system to communicate with each other