Your Diffusion Model is Secretly a Zero-Shot Classifier