I would suggest to configure your VLAN a bit simpler:
* on your switch/ router, defines a trunk port, who will get all your Ethernet packets, with or without VLAN headers
* on the PVE side, you do not need to configure any VLAN on the host, just make sure vmbr0 has a physical port connected to...