Hapax3, no sleep

While vlan-filtering is set to no on a bridge, no stripping or adding a VLAN tag happens on the bridge ports. So when a tagless frame gets in, through a physical interface, it stays tagless until it hits the IP stack listening at the internal port of the bridge (the "switch-facing interface of the router as outlined here).

Once you set vlan-filtering to yes, frames that get in through a physical interface get tagged with the VLAN ID that is set as the pvid of that port on the corresponding /interface/bridge/port row. But your configuration has no pvid specified for the “router-facing port of the switch”, which means its value is the default - 1. Hence the frame that came in e.g. via ether2 and thus got tagged with VLAN ID 10 passes through that “router-facing port of the switch” to the “switch-facing port of the router” still tagged, hence the IP stack attached to the “switch-facing port of the bridge”, which only handles tagless frames, ignores it. And so does mac-telnet or mac-winbox - they only listen for tagless traffic and only on interfaces that they are told to listen at in the configuration:
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN

So if you want to switch vlan-filtering from no to yes without locking yourself out, the pvid value of the “router-facing port of the switch” (a.k.a. “the bridge itself”) must be the same like the value of the pvid on the /interface/bridge/port row matching the physical interface your laptop is connected to. Or you must create in advance an /interface/vlan attached to the “switch-facing interface of the router” (again a.k.a. “the bridge itself”) whose vlan-id value matches the pvid of the laptop-facing physical interface, and attach an IP address and subnet to it; the subnet must differ from the one attached to the bridge directly so you have to change the IP address of the laptop after setting vlan-filtering to yes. Or you may add that /interface vlan to the interface list LAN to allow mac-winbox/mac-telnet access.