When Degree Anonymity Is Not Enough: Assessing Structural Re-identification Risk in Social Graphs