Add VLAN implementation documentation and scripts

- docs/11-VLAN-IMPLEMENTATION.md: Complete VLAN setup documentation
- scripts/mikrotik-vlan-setup.rsc: Full VLAN configuration script
- scripts/mikrotik-vlan-enable.rsc: VLAN filtering activation script

VLAN configuration is prepared but NOT YET ACTIVE.
Requires CSS326 switch configuration before enabling VLAN filtering.

VLANs configured:
- VLAN 1: Legacy (192.168.31.0/24)
- VLAN 10: Management (192.168.10.0/24)
- VLAN 20: Trusted (192.168.20.0/24)
- VLAN 30: IoT (192.168.30.0/24)
- VLAN 35: Cameras (192.168.35.0/24)
- VLAN 40: Servers (192.168.40.0/24)
- VLAN 50: Guest (192.168.50.0/24)

scripts/mikrotik-vlan-enable.rsc

@@ -0,0 +1,14 @@
+# MikroTik VLAN Filtering Enable Script
+# 
+# PREREQUISITES:
+# 1. Run mikrotik-vlan-setup.rsc first
+# 2. Configure CSS326 switch for VLAN trunking
+#
+# WARNING: This may cause temporary connectivity loss!
+# Have WinBox ready as backup access method.
+
+# Enable VLAN filtering on bridge
+/interface bridge set [find name=bridge] vlan-filtering=yes
+
+# Verify
+/interface bridge print where name=bridge