Chameleon: Increasing Label-Only Membership Leakage with Adaptive Poisoning