Coordinated Attacks against Contextual Bandits: Fundamental Limits and Defense Mechanisms