Dataset Protection via Watermarked Canaries in Retrieval-Augmented LLMs