Graph in the Vault: Protecting Edge GNN Inference with Trusted Execution Environment