TransTroj: Transferable Backdoor Attacks to Pre-trained Models via Embedding Indistinguishability