Fully Adaptive Composition for Gaussian Differential Privacy