feat(BCN01-LAB): sync manual Dashboard changes to Terraform

- Management VLAN switches → 109
- Puerto 47 stack: trunk, native VLAN 109
- SVI stack bcn01-lab-stack01: VLAN 109, 10.2.55.2/24, GW 10.2.55.1
- MX puerto 7: trunk, native VLAN 109
- Firewall: allow MANAGEMENT → internet (primera regla)
- Puerto 1 eqt-lab-st01-sw01: VLAN 110 (SERVERS)

sites/BCN01-LAB/switch.auto.tfvars

@@ -113,10 +113,51 @@ switch_port_configs = []
 # ]
 switch_stack_port_configs = [
   {
-    stack_name           = "bcn01-lab-stack01"
-    port_range           = "6"
-    type                 = "access"
-    vlan                 = 101  # GUEST
-    access_policy_type   = "Open"
+    stack_name         = "bcn01-lab-stack01"
+    port_range         = "6"
+    type               = "access"
+    vlan               = 101  # GUEST
+    access_policy_type = "Open"
+  },
+  {
+    # Puerto 47: uplink trunk en ambos miembros del stack
+    # VLAN nativa 109 (MANAGEMENT), permite todas las VLANs
+    stack_name         = "bcn01-lab-stack01"
+    port_range         = "47"
+    name               = "Uplink trunk"
+    type               = "trunk"
+    vlan               = 109  # MANAGEMENT - VLAN nativa (untagged)
+    allowed_vlans      = "all"
+    access_policy_type = "Open"
+  },
+]
+
+# Puertos por nombre de switch (para configurar un miembro concreto del stack)
+switch_named_port_configs = [
+  {
+    # Puerto 1 de eqt-lab-st01-sw01 → VLAN SERVERS (estática, sin autenticación)
+    switch_name        = "eqt-lab-st01-sw01"
+    port_range         = "1"
+    name               = "Servers"
+    type               = "access"
+    vlan               = 110  # SERVERS
+    access_policy_type = "Open"
+  },
+]
+
+# VLAN de gestión de los switches del site
+switch_management_vlan = 109
+
+# Interfaces L3 en el stack para acceso de gestión al Dashboard de Meraki
+stack_routing_interfaces = [
+  {
+    stack_name      = "bcn01-lab-stack01"
+    name            = "MANAGEMENT"
+    vlan_id         = 109
+    ip_address      = "10.2.55.2"
+    subnet          = "10.2.55.0/24"
+    default_gateway = "10.2.55.1"
+    dns1            = "8.8.8.8"
+    dns2            = "8.8.4.4"
   },
 ]