If you really want 24V passive and 802.3 PoE out at the same time, then you need Mikrotik with dual power supply. Mikrotiks don't have voltage transformers, PoE out voltage is same as power supply voltage (reduced by a few tenths of a Volt). There are a few models which use dual power supplies and if powered with both 24V and 48V, then you can select PoE out voltage per port.
Ouch! That is good to know. I am using a CRS112-8P-4S with a 48VDC PSU fully expecting it to supply 24V passive is configured to do so. I was aware that most of these products only ship with a 24VDC PSU, but did not know that the passive power delivery voltage depends on 24V and 48V being present by PSU's. It only powers a few 802.3af devices at this point.
This will definitely disqualify the MikroTik RB960PGS hEX as the goal here would be to support a 24V passive Ubiquity AP and a 48V 802.3af IP phone. I do not know if the Ubiquity AP are tolerant to 48V, just that the spec sheet specifies 24V passive. Plus the whole idea (for me) to utilizing a PoE switch is to eliminate the mess of power cubes and cords that need to be managed.
As a side note, I do prefer equipment that has integrated power supplies rather than needing external power supplies or wall cubes. I understand where this isn't a practical option for smaller form factors but it would have much preferred to see the CRS112-8P-4S simply with a standard AC power input receptacle instead of the 24V and 48V ports.