Limit commands outside of maintenance hours

How to use GitHub

• Please use the 👍 reaction to show that you are interested into the same feature.
• Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
• Subscribe to receive notifications on status change and new comments.

Is your feature request related to a problem? Please describe.
There are occ commands which are very disruptive and can even create downtimes for minutes and hours.

Describe the solution you'd like
Since #30945 a "maintenance window" can be configured.

When a disruptive command is being executed outside of the maintenance hours we should highlight that and ask for a quick confirmation first.

The following commands come to mind:

• app:update
• db:add-missing-columns
• db:add-missing-indices
• db:add-missing-primary-keys
• db:convert-filecache-bigint
• db:convert-mysql-charset
• db:convert-type
• encryption:decrypt-all
• encryption:encrypt-all
• maintenance:repair --include-expensive

Start by reviewing the maintenance-window configuration introduced in #30945 and the listed OCC commands: app:update, the database conversion commands, encryption commands, and maintenance:repair --include-expensive. Done means disruptive commands warn when run outside configured maintenance hours and require quick confirmation before proceeding.