Let’s start from what you expect VLAN Filtering to do, and what is “not working” in particular.
In the configuration of the RouterOS bridges, there is a configuration item named vlan-filtering which, if set to yes alone, allows tagging/untagging frames on ingress/egress to/from ports of that bridge, and only allows frames to egress through member ports of the VLAN they are tagged with. To prevent frames with “wrong” VIDs also from ingressing via a given port, you have to use additional settings, ingress-filtering and frame-types, on the individual ports.
In none of your two exports, vlan-filtering is set to yes, but that may be because you’ve reverted it after seeing it did not work as you expected.
However, there is another catch - if you want the Mikrotik device itself to be reachable via a given VLAN, it is not enough to attach an /interface vlan to the bridge interface, you must also put the bridge port on the corresponding list (tagged or untagged) on the /interface bridge vlan row for that VID.
See this topic for clarification what the single name of the bridge means in distinct contexts (as an interface, as a bridge port, as a “virtual switch”). It should clarify why the above is necessary.
Having said that - although activation of vlan-filtering should normally not cause an issue if you have configured /interface bridge port and /interface bridge vlan properly before, I have seen a case where it has failed and it was necessary to reboot the device to regain control of it. Since it did work properly after the reboot, the issue was not the vlan-filtering configuration but the actual process of change.
As you are so careful about not breaking the settings of the station, I assume access to it is complicated. Therefore, I’d first try to set up a second wireless interface with another SSID at both the AP and the station, as virtual ones linked to the physical ones, set up IP addresses from a common unique subnet on them, and check that you can access the STA this way. This will be your access channel to the station even if you break the bridge settings badly. I was not sure whether a virtual interface can run in station mode so I’ve tried on a mAP lite and succeeded, but there is still a chance that virtual interfaces won’t work at a 60 GHz radio - you have to try on your own, I don’t have any 60 GHz product handy.