Assessing physical vulnerability in large cities exposed to flash floods and debris flows: the case of Arequipa (Peru)