Adversarial Attacks and Defenses for Semantic Communication in Vehicular Metaverses