Scalable Membership Inference Attacks via Quantile Regression