IBP Regularization for Verified Adversarial Robustness via Branch-and-Bound