Switch from manual space-ID collection to collectDeletionBroadcastTargets and add user_updated broadcast so clients patch their caches when a federated user is deleted via S2S. Force-disconnect moved after broadcasts so other tabs receive events before the connection is torn down.