Verified Training for Counterfactual Explanation Robustness under Data Shift