fix: sync dashboard drift — Javi synology rule + Servers port VLAN

- Añade regla firewall "Acceso Javi a synology" (posición 4):
  allow GUEST (10.2.40.0/21) → 10.2.56.0/24
- Corrige VLAN del puerto Servers (eqt-lab-st01-sw01:1): 110 → 101
  para coincidir con el estado actual del Dashboard

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

sites/BCN01-LAB/firewall.auto.tfvars

@@ -33,6 +33,16 @@ firewall_rules = [
     dest_port      = "any"
     syslog_enabled = false
   },
+  {
+    comment        = "Acceso Javi a synology"
+    policy         = "allow"
+    protocol       = "any"
+    src_cidr       = "10.2.40.0/21"  # VLAN 101 - GUEST
+    src_port       = "any"
+    dest_cidr      = "10.2.56.0/24"
+    dest_port      = "any"
+    syslog_enabled = false
+  },
   {
     comment        = "Bloqueo temporal switch a 8.8.8.8"
     policy         = "deny"