Constitutional Classifiers: Defending against Universal Jailbreaks across Thousands of Hours of Red Teaming