Share phone hotspot to router's ethernet ports and its own ap

If I were you, I would import (actually copy/paste) the default set of firewall rules (they need the interfaces correctly categorized in interface lists, but now you have them), see Rule #8:
The twelve Rules of Mikrotik Club