MEA-Defender: A Robust Watermark against Model Extraction Attack