Exposing Privacy Risks in Graph Retrieval-Augmented Generation