Up to now we covered the most common use case, that the PVE bridge vmbr0 is connected to a switch where is receives the proper VLAN tags, and when creating a VM NIC you just need to specify one of those VLAN tags.
Can you please explain what is your use case in details ?