A Programming Framework for Differential Privacy with Accuracy Concentration Bounds