Certified Robustness of Graph Neural Networks against Adversarial Structural Perturbation