Text this: Adversarial robustness guarantees for classification with Gaussian Processes