A Systematic Study of Model Extraction Attacks on Graph Foundation Models