Certified Robustness to Data Poisoning in Gradient-Based Training