The Vercel breach: OAuth attack exposes risk in platform environment variables