Railway paused all deployments after an unauthorized party may have accessed customer environment variables, and told every user to rotate API keys.