On the Duality Between Sharpness-Aware Minimization and Adversarial Training