Hi, wireguard can build connections both outbound and inbound, therefore will still work if one end is behind CG-NAT, this is expected behaviour for CG-NAT, can you please confirm the WAN address reported in the TP-Link router (not the IP address reported by an online tool).
Also as has been explained to you by two ex Voda/One staff, what you want to do is not possible, its Voda/One's network not yours, there are plenty of less restricted ISPs, but not on 5G
Cyril