Differentially Private SQL with Bounded User Contribution