DP query analysis

Write an ordinary aggregation query; anon.dp_query derives the sensitivity, adds Laplace or Gaussian noise, and refuses what it can't bound.

Aggregate
Mechanism
Estimated sensitivity Δ
Δ = 1row-level

no DP PID: the neighbor is add/remove one row, so Δ = base

Laplace scale b = Δ/ε = 1.00