A calm hour-by-hour playbook for the first day after a breach: who to call in what order, what to unplug, what never to delete, and what to say.