An Optimal Transport Approach for Computing Adversarial Training Lower Bounds in Multiclass Classification