Refactor the `social_security_excess` in the `refundable_ctc` calculation

[PavelMakarchuk]

The following code is duplicated multiple times
We currently use the computation in the Colorado refundable CTC as well as adding it in the New York additional CTC computation in #4451

[MaxGhenis]

let's also make those constants parameters