Insecure YAML deserialization, leaked demo creds, and a root password sitting in ps aux — solving TryHackMe's Beach Bar room from Hacker Holidays.