Understanding and Mitigating Cross-lingual Privacy Leakage via Language-specific and Universal Privacy Neurons