Robust Validation: Confident Predictions Even When Distributions Shift