Twisting Molecules Just Enough: Physically Valid Adversarial Attacks Expose Weak Spots in 3D AI Chemistry Models Bioengineer.org