Portal is to blame
I haven't asked the DBA to look but I would be willing to bet it's just the Portal using up all that RAM and swap space. As we've rolled out the Portal to more and more users, there's now gigabytes worth of document blobs stored in that schema. Plus many more users logged in, so there's session and state objects being maintained by the Portal. Etc., etc.