Concept-Guided Backdoor Attack on Vision Language Models