Trojan Prompt Attacks on Graph Neural Networks