Differentially-Private Hierarchical Clustering with Provable Approximation Guarantees