Ensure an offline or in-controlled-shutdown replica is not eligible to join ISR in ZK mode

KIP-841 introduced fencing on ISR in KRaft. We should also provide some of these protections in ZK, since all the ground work is mostly there.