S2AP: Score-space Sharpness Minimization for Adversarial Pruning