Text-to-Image Models Leave Identifiable Signatures: Implications for Leaderboard Security