Robustness and risk management via distributional dynamic programming