Optimizing Canaries for Privacy Auditing with Metagradient Descent