Function run_force_remove 

pub fn run_force_remove(
    order: &ForceRemoveOrder,
    membership: &mut MembershipCatalog,
    ownership: &mut ShardOwnershipCatalog,
    signals: &impl ClusterSignals,
) -> ForceRemoveResult

Plan and execute a forced removal: force-promote each owned range’s surviving replica (fencing the dead owner via the epoch bump), drop the dead member’s stale replica copies, then remove it from membership. Returns the audit evidence and outcomes. Unlike a planned drain, this never refuses — a dead member is removed even when some of its ranges are unrecoverable.