Load certified annual projection datasets by year #523

Microcosm's static-aging operator now supports independent annual cross-sections (PolicyEngine/microcosm#957; design tracking in PolicyEngine/microcosm#333). The production data interface will publish one native single-year H5 per supported year.

The wrapper currently extracts future-year inputs from one base file and reuses derived cache files by dataset basename and year. It needs to select explicitly published annual artifacts and preserve their projection provenance.

Required behavior:

• Validate producer metadata.dataset_years mappings during bundle certification and retain exact revision/hash pins.
• Load the requested annual H5 and verify its embedded year, entity layout, and source identity.
• Keep cache entries separate across data revisions and relevant model/runtime identities.
• Prevent country auto-extension from substituting unpublished years; preserve genuine internal historical dependencies.
• Load requested years plus the earlier published input years required for those dependencies, without fetching future years by default.
• Preserve native-ID regional filtering and projected household weights.

This issue covers consumer integration. A separate certification change will select the published annual release and the model version containing the Medicaid/SNAP cycle fix (PolicyEngine/policyengine-us#9539).