Rethinking Pruning for Backdoor Mitigation: An Optimization Perspective