Looking for hardware recommendations, one device as router, one device as wireless AP

This will not work unless your ISP has made provisions for this use case.
Connect the VoIP phones to the router, and consider setting up SQM.

Likely more than sufficient, unless you want to saturate your line using OpenVPN: