Proving membership in LLM pretraining data via data watermarks