Robust SAM: On the Adversarial Robustness of Vision Foundation Models