A Characterization of Semi-Supervised Adversarially Robust PAC Learnability