Convex Bounds on the Softmax Function with Applications to Robustness Verification