chore(deps): update policyengine to 6.7.5

[policyengine]

Fixes #825

Summary

Update policyengine.py from 6.7.0 to 6.7.5 in the simulation API runtime.

The policyengine[models] requirement selects the runtime versions bundled by policyengine.py 6.7.5:

• policyengine-core: 3.33.0
• policyengine-us: 2.2.1
• policyengine-uk: 2.130.1
• spm-calculator: 1.0.0

The bundle also selects these certified data releases:

• US: populace-us-2024-spm-20260915
• UK: policyengine-uk-data-1.58.1

UK release identity:

• certified dataset SHA-256: 056e80fd8e9151d78f432a25cde863340baee81304c6216a37fb575ce8563784
• certificate digest (receipt v1): c23b40f444e62f6223da28d5d846583f8914096fb845e431ff553ac3e8677020
• release dispatch verified against the installed wheel: true
• qualification: none recorded

---

Generated automatically by GitHub Actions.

[MaxGhenis]

Deployed. "Deploy Simulation API" run 39173593509 on merge commit 35857b2e completed success; every beta and prod job passed.

Prod identity and sentinel (from "Complete prod deployment / Verify deployed three-service stack"):

• https://p-67---policyengine-simulation-entry-4xy55an4yq-uc.a.run.app serves policyengine 6.7.5 from policyengine-simulation-py6-7-5, with policyengine-uk 2.130.1 and UK dataset 056e80fd8e9151d78f432a25cde863340baee81304c6216a37fb575ce8563784 as latest.
• It reproduces 1 sentinel case for policyengine 6.7.5 on that UK dataset.

US state regions on real infrastructure. The beta three-service verification passed all 19 tests, including both US region: "state/ut" calculations: test_calculate_us_state_region_model and test_calculate_specific_model. This is the first deploy past policyengine 6.2.1 in which US state regions run on the ACS-local dataset. That dataset is the PolicyEngine/microcosm#1263 rebuild, certified in PolicyEngine/policyengine.py#649 (populace-us-2024-buildo-acs-local-766b7c7-20261017T030317Z). The failure tracked in #747 (SPM_COMPOSITION_REQUIRED) did not recur.

Update PR checks before merge:

• 14 of 14 checks passed, including the staging image smoke.
• The diff moves only the policyengine pin.
• The locked wheel sha256 acb921a6cd78c5bd5692827d3830fad9225a25f7e93e5742b92b2909624f76d3 and sdist sha256 872457de79f51dc57f33efb85274cb461d14aa42017e39aabf9d6611a673b30a match https://pypi.org/pypi/policyengine/6.7.5/json.
• The updater lost the PyPI index race twice before a rerun opened this PR.

Squash-merged with --match-head-commit fc657de3 by the W4 ACS-repoint reviewer. #824 (6.7.3) was closed as superseded.