Adversarially trained neural representations are already as robust as biological neural representations