How to Protect a Patient Booking Chatbot Like Doctolib from Prompt Injection