An Unforgeable Publicly Verifiable Watermark for Large Language Models