Distributional Adversarial Attacks and Training in Deep Hedging