Tensor Trust: Interpretable Prompt Injection Attacks from an Online Game