SecInfer: Preventing Prompt Injection via Inference-time Scaling