stemcells should be deletable with force

- but only when it isn't being used in a deployment
- e.g. when "someone" nukes the stemcell image from the IaaS