Samplable Anonymous Aggregation for Private Federated Data Analysis