Trading Inference-Time Compute for Adversarial Robustness