ARMOR: Shielding Unlearnable Examples against Data Augmentation