In the Hugging Face breach, OpenAI’s hacker was noisy and fast — but not unstoppable