Returns selectable bridge/vnet targets for a new VM's NIC, distinguishing real bridges (Linux, OVS) from SDN vnets, and exposing whether a NIC on that target may additionally carry a vlan_tag (Linux bridge vlan_aware flag, OVS always, SDN vnet never — the VLAN is already fixed by the vnet's zone/tag).