Fix duplicate camera VLAN issues for Wi-Fi Protect cameras

[tvancott42]

Summary

• Fix duplicate audit issues for Wi-Fi connected Protect cameras - Cameras like the G6 Instant that connect via Wi-Fi were flagged twice: once by the Protect API fallback (Phase 3a) and again by the wireless client rule (Phase 3b). Fixed by running wireless client extraction before the fallback and adding all wireless client MACs to the skip set, so the wireless rule handles them with richer context (AP name, band, signal).
• Two new dedup tests covering wireless camera skip and mixed wired/wireless scenarios.

Test plan

• All 12 fallback tests pass (10 existing + 2 new)
• Full suite passes (3,964 tests, 0 failures, 0 warnings)
• Deploy to two test sites, run audit, verify single issue for Wi-Fi camera (not duplicate), and no regression on wired camera rule