Add defensive check for missing attack metrics in AttackRunner

[nishanthp]

Added a guard in run_attack to handle cases where evaluate_attack returns None or an empty list. This prevents crashes when building the result string and instead returns a NO_METRICS marker.