feat: configure static WAN1 IP for primary and spare MX

Añade recurso meraki_device_management_interface para configurar
IP estática en el puerto WAN1 de ambos firewalls MX:
  - Primary: 213.229.159.145/28 (255.255.255.240), GW 213.229.159.147
  - Spare:   213.229.159.146/28 (255.255.255.240), GW 213.229.159.147

Los seriales del MX deben reemplazarse en wan.auto.tfvars.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

modules/meraki-site/main.tf

@@ -186,6 +186,18 @@ resource "meraki_appliance_l3_firewall_rules" "reglas_firewall" {
   rules      = var.firewall_rules
 }
 
+# 4b. Configuración WAN estática de los MX (primary y spare)
+resource "meraki_device_management_interface" "mx_wan" {
+  for_each = { for mx in var.mx_wan_uplinks : mx.serial => mx }
+
+  serial                  = each.key
+  interfaces_wan1_enabled = each.value.interfaces_wan1_enabled
+  wan1_static_ip          = each.value.wan1_static_ip
+  wan1_static_subnet_mask = each.value.wan1_static_subnet_mask
+  wan1_static_gateway_ip  = each.value.wan1_static_gateway_ip
+  wan1_static_dns         = each.value.wan1_static_dns
+}
+
 # --- CONFIGURACIÓN SWITCHES (MS) ---
 
 # 5. Políticas de acceso 802.1X

modules/meraki-site/variables.tf

@@ -184,6 +184,20 @@ variable "stack_routing_interfaces" {
   description = "Interfaces L3 (SVIs) en stacks de switches para acceso de gestión al Dashboard de Meraki."
 }
 
+# Configuración WAN de los firewalls MX (primary y spare)
+variable "mx_wan_uplinks" {
+  type = list(object({
+    serial                  = string
+    interfaces_wan1_enabled = optional(bool, true)
+    wan1_static_ip          = optional(string, null)
+    wan1_static_subnet_mask = optional(string, null)
+    wan1_static_gateway_ip  = optional(string, null)
+    wan1_static_dns         = optional(list(string), null)
+  }))
+  default     = []
+  description = "Configuración de interfaz WAN1 estática para cada MX (primary y spare)."
+}
+
 # Puertos del firewall MX
 variable "appliance_ports" {
   type = list(object({