add: OPNsense VM and UniFi network config

- OPNsense VM 130 on pm4 (KavSense, 10.4.2.1)
- VLAN 10 configured (10.4.10.0/24) for future use
- pm4 vmbr0 now VLAN-aware
- UniFi SSIDs: Trusted, IOT, Guest
- VLAN testing paused until GiGaPlus switches arrive

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

docs/INFRASTRUCTURE.md

@@ -44,7 +44,8 @@
 | **Immich** | 10.4.2.24:2283 | LXC 126 (pm4) | immich.kavcorp.com | Built-in |
 | **Gitea** | 10.4.2.7:3000 | LXC 127 (pm4) | git.kavcorp.com | Built-in |
 | **Pi-hole** | 10.4.2.129 | LXC 103 (pm4) | pihole.kavcorp.com | Built-in |
-| **UniFi Controller** | 10.4.2.242:8443 | LXC (pm4) | - | Built-in |
+| **UniFi Controller** | 10.4.2.242:8443 | LXC 111 (pm4) | - | Built-in |
+| **OPNsense (KavSense)** | 10.4.2.1 | VM 130 (pm4) | - | Built-in |
 | **KavNas** | 10.4.2.13 | Synology NAS | - | NAS auth |
 
 ## Storage Architecture