METR's independent investigation of the OpenAI / Hugging Face hacking incident