Certifiably Adversarially Robust Detection of Out-of-Distribution Data