PANDORA:  Jailbreak GPTs by Retrieval Augmented Generation Poisoning