Double-I Watermark: Protecting Model Copyright for LLM Fine-tuning