refactor: rename site bcn01 to BCN01-LAB

- Rename sites/bcn01/ -> sites/BCN01-LAB/
- Update S3 backend key: bcn01/terraform.tfstate -> BCN01-LAB/terraform.tfstate
- Rename Terraform module: bcn01 -> bcn01_lab
- Update working-directory in apply.yml and plan.yml
- Update job/step names to BCN01-LAB

NOTA: mover manualmente en S3 el objeto
  bcn01/terraform.tfstate  ->  BCN01-LAB/terraform.tfstate
antes de hacer terraform init en el nuevo directorio.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

sites/BCN01-LAB/firewall.auto.tfvars

@@ -0,0 +1,33 @@
+# Reglas de firewall L3
+firewall_rules = [
+  {
+    comment        = "Bloqueo temporal switch a 8.8.8.8"
+    policy         = "deny"
+    protocol       = "any"
+    src_cidr       = "192.168.8.50/32"
+    src_port       = "any"
+    dest_cidr      = "8.8.8.8/32"
+    dest_port      = "any"
+    syslog_enabled = false
+  },
+  {
+    comment        = "Bloqueo especifico DNS Cloudflare 1.1.1.1 desde VC"
+    policy         = "deny"
+    protocol       = "any"
+    src_cidr       = "10.2.48.0/24" # VLAN 102 - VC
+    src_port       = "any"
+    dest_cidr      = "1.1.1.1/32"
+    dest_port      = "any"
+    syslog_enabled = false
+  },
+  {
+    comment        = "Denegar el resto del trafico de salida"
+    policy         = "deny"
+    protocol       = "any"
+    src_cidr       = "any"
+    src_port       = "any"
+    dest_cidr      = "any"
+    dest_port      = "any"
+    syslog_enabled = false
+  }
+]