Adversarial Purification by Consistency-aware Latent Space Optimization on Data Manifolds