Toward Certified Robustness Against Real-World Distribution Shifts