Diffusion Denoising as a Certified Defense against Clean-label Poisoning