[11.x] Allows to exclude URIs in PreventRequestsDuringMaintenance middleware

[kishieel]

I think that with the new way of middleware configuration we lost the ability to allow access to defined URIs during maintenance. I bring it back with this PR.