Shift-aware score transport for privacy auditing without retraining