Adversarial Robustness Guarantees for Quantum Classifiers