Certifiably Robust Variational Autoencoders