Best Low-Rank Approximation from a Matvec Budget