The most they can be fined in $2 million. I expect that the draft penalty will be severe and that the Astros won't have any bonus money for at least a year. The Cards lost their top two draft picks when they got busted hacking the Astros. And their investigation revealed only one guy was involved.
This appears to be systemic so I imagine the penalties will be worse and there will likely be suspensions.
I don't think there is any mechanism to vacate a title.
I can't tell you how much the Nats saved MLB's bacon by beating Houston. This would be ten times worse if they had won.
That being said, I bet the first thing MLB did was to check and see if the Nats (and likely 2017 Dodgers) were clean...