Contracting projected entangled pair states is average-case hard