Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors