Allow user to define whether or not a geo can be fully removed

With the out-of-the-box soft delete we could potentially remove the entire geo.
We need to explicitly let the user decide how they want to handle the scenario when their geo is not healthy.

Start by tracing the out-of-the-box soft-delete handling and the path used when a geo is unhealthy. Define the user-configurable behavior for whether the entire geo may be removed, then verify that both choices produce the intended outcome.

Written by the indexing model from the issue text.