Text this: FTG: Score-based black-box watermarking by fragile trigger generation for deep model integrity verification