Clio: A system for privacy-preserving insights into real-world AI use