refactor: rename site bcn01 to BCN01-LAB

- Rename sites/bcn01/ -> sites/BCN01-LAB/
- Update S3 backend key: bcn01/terraform.tfstate -> BCN01-LAB/terraform.tfstate
- Rename Terraform module: bcn01 -> bcn01_lab
- Update working-directory in apply.yml and plan.yml
- Update job/step names to BCN01-LAB

NOTA: mover manualmente en S3 el objeto
  bcn01/terraform.tfstate  ->  BCN01-LAB/terraform.tfstate
antes de hacer terraform init en el nuevo directorio.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

sites/BCN01-LAB/variables.tf

@@ -0,0 +1,76 @@
+# Definición de la Organización
+variable "organization_name" {
+  type        = string
+  description = "Nombre exacto de tu organización en el Dashboard de Meraki"
+}
+
+# Definición de la Red
+variable "network_name" {
+  type        = string
+  description = "Nombre de la red (Network) donde reside el switch"
+}
+
+
+# Reglas de firewall L3
+variable "firewall_rules" {
+  type = list(object({
+    comment        = string
+    policy         = string
+    protocol       = string
+    src_cidr       = string
+    src_port       = string
+    dest_cidr      = string
+    dest_port      = string
+    syslog_enabled = optional(bool, false)
+  }))
+  default     = []
+  description = "Lista de reglas de firewall L3 para el site"
+}
+
+# SSIDs wireless
+variable "wireless_ssids" {
+  type = list(object({
+    number              = number
+    name                = string
+    enabled             = optional(bool, true)
+    auth_mode           = string
+    splash_page         = optional(string, "None")
+    wpa_encryption_mode = optional(string, "WPA3 only")
+    ip_assignment_mode  = optional(string, "Bridge mode")
+    use_vlan_tagging    = optional(bool, false)
+    default_vlan_id     = optional(number, null)
+    redirect_url        = optional(string, "")
+    radius_servers = optional(list(object({
+      host = string
+      port = number
+    })), [])
+  }))
+  default     = []
+  description = "Lista de SSIDs wireless a configurar en el site"
+}
+
+# Shared secret para servidores RADIUS (sensible, no incluir en tfvars)
+variable "radius_secret" {
+  type        = string
+  sensitive   = true
+  default     = ""
+  description = "Shared secret para autenticación RADIUS. Pasar via TF_VAR_radius_secret"
+}
+
+# Definición de VLANs
+variable "switch_vlans" {
+  type = map(object({
+    name          = string
+    subnet        = string
+    appliance_ip  = string
+    dhcp_handling = optional(string, "Run a DHCP server")
+    reserved_ip_ranges = optional(list(object({
+      comment = string
+      id      = string
+      start   = string
+      end     = string
+    })), [])
+  }))
+  description = "Mapa de configuraciones de VLAN. La clave del mapa será el ID de la VLAN"
+}
+