Non-Convex SGD Learns Halfspaces with Adversarial Label Noise