Firewall rule to forward traffic from specific SSID to WireGuard Iface

I'm not aware of a way to achieve this using a single VLAN.

Perhaps it's worth trying multiple VLANs with Policy-Based Routing, and then seeing if Avahi can be used to meet your
Bonjour/Airplay requirement?