OSLO: One-Shot Label-Only Membership Inference Attacks