The Discrete Gaussian for Differential Privacy