feat: configure static WAN1 IP for primary and spare MX

Añade recurso meraki_device_management_interface para configurar
IP estática en el puerto WAN1 de ambos firewalls MX:
  - Primary: 213.229.159.145/28 (255.255.255.240), GW 213.229.159.147
  - Spare:   213.229.159.146/28 (255.255.255.240), GW 213.229.159.147

Los seriales del MX deben reemplazarse en wan.auto.tfvars.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

sites/BCN01-LAB/main.tf

@@ -36,5 +36,6 @@ module "bcn01_lab" {
   switch_management_vlan    = var.switch_management_vlan
   stack_routing_interfaces  = var.stack_routing_interfaces
   appliance_ports           = var.appliance_ports
-  wifi_password_psk   = var.wifi_password_psk
+  mx_wan_uplinks            = var.mx_wan_uplinks
+  wifi_password_psk         = var.wifi_password_psk
 }

sites/BCN01-LAB/variables.tf

@@ -183,3 +183,16 @@ variable "appliance_ports" {
   default     = []
   description = "Configuración de puertos LAN del firewall MX."
 }
+
+variable "mx_wan_uplinks" {
+  type = list(object({
+    serial                  = string
+    interfaces_wan1_enabled = optional(bool, true)
+    wan1_static_ip          = optional(string, null)
+    wan1_static_subnet_mask = optional(string, null)
+    wan1_static_gateway_ip  = optional(string, null)
+    wan1_static_dns         = optional(list(string), null)
+  }))
+  default     = []
+  description = "Configuración WAN1 estática de los MX (primary y spare)."
+}

sites/BCN01-LAB/wan.auto.tfvars

@@ -0,0 +1,22 @@
+# Configuración WAN1 estática de los firewalls MX
+# Los seriales se encuentran en: Dashboard > Security & SD-WAN > Appliance > Overview
+mx_wan_uplinks = [
+  {
+    # MX Primary
+    serial                  = "XXXX-XXXX-XXXX"  # TODO: reemplazar con serial del MX primary
+    interfaces_wan1_enabled = true
+    wan1_static_ip          = "213.229.159.145"
+    wan1_static_subnet_mask = "255.255.255.240"  # /28
+    wan1_static_gateway_ip  = "213.229.159.147"
+    wan1_static_dns         = ["8.8.8.8", "8.8.4.4"]
+  },
+  {
+    # MX Spare (Warm Spare / HA)
+    serial                  = "YYYY-YYYY-YYYY"  # TODO: reemplazar con serial del MX spare
+    interfaces_wan1_enabled = true
+    wan1_static_ip          = "213.229.159.146"
+    wan1_static_subnet_mask = "255.255.255.240"  # /28
+    wan1_static_gateway_ip  = "213.229.159.147"
+    wan1_static_dns         = ["8.8.8.8", "8.8.4.4"]
+  },
+]