Attacking by Aligning: Clean-Label Backdoor Attacks on Object Detection