Foundation warns Passport users after a Cloudflare API key breach led to phishing emails from its domains. The company says Bitcoin funds remain safe.