FBA$^2$D: Frequency-based Black-box Attack for AI-generated Image Detection