For the price, I think the best set up is getting what ever ethernet only router that has your needed feature set (or just use a box with linux/shorewall), and

For the price, I think the best set up is getting what ever ethernet only router that has your needed feature set (or just use a box with linux/shorewall), and then for wifi, running cat5 with POE to some Mikrotik wAP access points.