Feature: tools: crm_shadow --reset now requires --force
This breaks behavioral backward compatibility.
Fixes T635