WorstCaseAttack to expose per-record scores

[shamykyzer]

WorstCaseAttack outputs only aggregate metrics, no per-record scores. To include it in MetaAttack it needs a report_individual flag like LiRA and QMIA that populates per-record scores in attack_metrics[N]["individual"].

Surfaced as Jim's PS in #441.