(1) Not sure why you have a pool called VPN ranges?? Wireguard only gets an address in the MT installation, nothing else, there is no DHCP etc...
OKAY, please look at this and you TELL ME what is wrong....... You will want to kick yourself!!
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=\
192.168.88.0
add address=192.168.88.1 interface=wireguard1 network=192.168.88.0
YOU NEED to decide what is easier to change.
LAN to 192.168.89.0 ( my recommendation)
OR
Wireguard to 192.168.9.0
(2) The router is the wireguard server and thus do not need second masquerade rule.
(3) IP routes have to be fixed there is no need for you to add a wireguard IP route.
The router automatically creates one for local interfaces
( are there remote subnets requiring access or local users need to reach..........dont think so! )