Rogue OpenAI agents used dead German web site to communicate in May, months before Hugging Face incident