This was reported via #58559

Currently, to get excluded paths in app/bootstrap working with php artisan down, you need to create your own App\Http\Middleware\PreventRequestsDuringMaintenance middleware class.

This PR fixes it so the preventRequestsDuringMaintenance() configuration in bootstrap/app.php actually works with the down command. Which is recommended in statamic here

Before this fix, configuring it like this does nothing (with the file driver):

->withMiddleware(function (Middleware $middleware) {
    $middleware->preventRequestsDuringMaintenance(except: [
        '/api/*',
        '/oauth/*',
    ]);
    
    // When calling down..

    // Would give us just...: 
        "except": [
        "\/up"
    ],
    
    // This PR ensures we get... 
        "except": [
        "\/up",
        "\/api\/*"
        "\/oauth\/*"
    ],
})

I've also removed the App\Http\Middleware\PreventRequestsDuringMaintenance usage for the framework middleware, as afaik the middleware stuff went in Laravel 11 - not sure if you want to keep it, but can re-work this to check it exists first then fallback.

I've added the ConsoleKernel bit so console commands can access the middleware static proerties ie so DownCommand can access the excluded paths - but granted you may have a better way of doing it. But I believe it's safe as middleware classes only execute during HTTP requests? (I think) and this just makes sure the static stuff is available.

Targeted 13.x as is a B/C, and needs a good think.

I've included a test that fails without the changes. But couldn't figure out how to get a test to fully cover the need for the ConsoleKernel bit - however tested locally.

Any feedback welcome, maybe we just shouldn't cover this usage, dunno.

Cheers