Arla cyber-hit plant nears “normal” operations