Collective Certified Robustness against Graph Injection Attacks