Learning to Generate Image Embeddings with User-level Differential Privacy