Enhancing Quantum Adversarial Robustness by Randomized Encodings