Checkpoint-GCG: Auditing and Attacking Fine-Tuning-Based Prompt Injection Defenses