Few-shot Model Extraction Attacks against Sequential Recommender Systems