I am setting up a complete home office IT...

I am setting up a complete home office IT infrastructure by 2026-08-30 and need expert guidance on the following: NETWORK SETUP: - Router: Ubiquiti UniFi Dream Router with 1Gbps fiber connection - WiFi: 3x TP-Link Deco X55 AX3000 mesh nodes covering 4,500 sq ft WORKSTATION: - MacBook Pro M3 Max connected via CalDigit TS4 Thunderbolt 4 dock - Dual Dell U2723QE 4K USB-C 27-inch monitors - Standing desk with full cable management POWER: - Tripp Lite SMART1500LCDXL UPS (900W capacity, 24-min runtime at half load) - Dedicated 20A circuit MY QUESTIONS: 1. VLAN Segmentation: What is the correct VLAN configuration on the UniFi Dream Router to properly isolate IoT devices from work devices? What firewall rules and separate SSIDs should I configure to ensure IoT devices cannot access my work network? 2. VPN Protocol: For securely accessing my company's on-premise Jira and Confluence servers remotely, which protocol provides better performance on a MacBook Pro M3 Max with 1Gbps fiber — WireGuard or OpenVPN? Which offers lower latency, higher throughput, and better battery efficiency on Apple Silicon? 3. How should I integrate the TP-Link Deco X55 mesh system with the UniFi Dream Router while maintaining VLAN segmentation across the entire 4,500 sq ft coverage area?