Require application maintenance mode when running pg:maintenance run

Allow to override with --force flag.

A customer suggested this after a rocky experience with `pg:maintenance run`. There is more we can do, but this could help set expectations correctly.