VLAN Setup: consolidating router+switch+services onto one box vs. UniFi kit?

Setup: 3-node Proxmox cluster on Dell OptiPlex Micros, hosting Nextcloud, Immich, Plex, the *arr stack, Home Assistant, Zigbee2MQTT (via an SLZB-06 Ethernet coordinator), Pi-hole, Tailscale, NPMplus, PBS, etc. Currently on a flat network: TP-Link Archer AX55 + TL-SG108E managed switch. What I'm trying to achieve: Proper VLAN segmentation - IoT isolated from the main network, a kids network with DNS-level content filtering, a guest network, and a homelab network Minimise equipment and power outlets - I have