Fine-tuning is Not Fine: Mitigating Backdoor Attacks in GNNs with Limited Clean Data