With a recovery rate below 10%, most stolen works are never found. But that doesn’t mean they’re easy to monetize.