Sharp bounds on the VaR for sums of dependent risks