Worst-Case Discovery and Runtime Protection for RL-Based Network Controllers