Cut Costs, Not Accuracy: LLM-Powered Data Processing with Guarantees