How OpenAI's agents broke out of testing to hack Hugging Face