Enforcing Almost-Sure Reachability in POMDPs