On the Robustness of Tabular Foundation Models: Test-Time Attacks and In-Context Defenses