CheatAgent: Attacking LLM-Empowered Recommender Systems via LLM Agent