feat(BCN01-LAB): sync manual Dashboard changes to Terraform

- Management VLAN switches → 109
- Puerto 47 stack: trunk, native VLAN 109
- SVI stack bcn01-lab-stack01: VLAN 109, 10.2.55.2/24, GW 10.2.55.1
- MX puerto 7: trunk, native VLAN 109
- Firewall: allow MANAGEMENT → internet (primera regla)
- Puerto 1 eqt-lab-st01-sw01: VLAN 110 (SERVERS)

sites/BCN01-LAB/firewall.auto.tfvars

@@ -1,5 +1,16 @@
 # Reglas de firewall L3
 firewall_rules = [
+  {
+    # Permite que los switches (VLAN MANAGEMENT) lleguen a internet para acceder al Dashboard de Meraki
+    comment        = "Permitir MANAGEMENT a internet (acceso Dashboard Meraki)"
+    policy         = "allow"
+    protocol       = "any"
+    src_cidr       = "10.2.55.0/24"  # VLAN 109 - MANAGEMENT
+    src_port       = "any"
+    dest_cidr      = "any"
+    dest_port      = "any"
+    syslog_enabled = false
+  },
   {
     comment        = "Bloqueo temporal switch a 8.8.8.8"
     policy         = "deny"