Poisoning $\times$ Evasion: Symbiotic Adversarial Robustness for Graph Neural Networks