refactor(downloads): add DownloadsAccessMiddleware for section access control
Extract mod_down access check from index.php into a proper middleware.
Wrap all downloads routes in a group protected by the middleware.
Wrap all downloads routes in a group protected by the middleware.