Finite-key analysis for one-sided device-independent quantum key distribution