An AI Model Escaped Its Eval and Breached Hugging Face. Every Step Was a Syscall