Recoverable Robustness in Shunting and Timetabling