Adapting to Evolving Adversaries with Regularized Continual Robust Training