There was a nice PDF file but somebody opted to convert everything to Sphinx. I will post the original PDF.
There are 18 GPIO analog ports because connecting a user area signal directly to the GPIO pad bypasses everything and can be disruptive to any signal that is required for use by the management SoC. There are a handful of signals (the ones closest to the management SoC) that are "reserved" for use as UART Tx/Rx, secondary SPI flash, SPI, etc. Given the unlikelihood that somebody would need 38 connections directly to the pad, the reserved ports are prohibited from having direct connections so that the user project area cannot accidentally disrupt the operation of the management SoC by forcing a value on one of those pins.
As for vdda1/vdda2: The user area was divided into left and right sides, and the power domains were split. This allows a user project to have two independent voltage domains (four, if you include the vccd1 and vccd2 1.8V domains). If you do not need multiple independent voltage domains, you can just connect them together internally (or externally) so you can double the maximum current you can inject through them.