Merge Now, Regret Later: The Hidden Cost of Model Merging is Adversarial Transferability