AntiDote: Bi-level Adversarial Training for Tamper-Resistant LLMs