Understanding Adversarially Robust Generalization via Weight-Curvature Index