Certifiable (Multi)Robustness Against Patch Attacks Using ERM