First off, is this the same setup as described in your previous post from 2023?
how do you get 2nd Switch to receive WOL Packets?
I will start with a disclaimer, I don't have a CSS326, but I do have two CSS106-5G-1S switches which use SwOS.
Looking at the screenshots from the old post (by the way, when you post screenshots use the "^" just to the right of the </> to upload if you have a graphic file, or just paste if it is in your clipboard, instead of uploading to imgbb,pastebin,etc.)
In this post you have three links, the third is showing your "forwarding" tab shows "Mirror To" selected, but you only show one port, so we don't know if you are mirroring anything or not. But mirroring isn't what you want. Mirroring is for allowing you to see traffic being sent between other ports (specifically unicast traffic that would normally be sent only to the port that the mac address was learned on). This is useful for debugging with wireshark, or for monitoring traffic (or recording with something like dumpcap). Example see Chris Greer's youtube video BUILD a Packet Capture Appliance for $200! Raspberry Pi
I highly suggest you spend some time reading CRS3xx and CSS3xx series Manual - SwOS - MikroTik Documentation because if you want your switches to be vlan-aware (and allow things like access ports), you shouldn't be using "optional" or "force VLAN id".
At the very least, read the VLAN and VLANs section, which includes a VLAN Configuration Example section. You want the ports going to the pfsense box and between the two CSS326 switches to be either trunk ports or hybrid ports (depending on how your pfsense box is set up, specifically whether your pfsense box sends any untagged traffic to the directly connected switch.) And then you would set up the ports you want to have access to specific vlans as access ports (for devices that know nothing about vlans, like most PC's).