Having a brain cramp for Sonic Wall routing

Trying to setup an office where a smart TV connects to a CDN and other devices route over a VPN.  PC's/phones on one VLAN, TV on another.

I need to setup routing everything routes over a VPN tunnel (Can do this one in my sleep with a TZ-200)  However, the TV needs to go straight out to the web (and obviously I don't want the subnets to talk to each other)

DHCP is handled elsewhere and the TV will be directly connected to the SonicWall so no VLANs needed on the switch

2nd IP / SonicWall is a no-go, as is using a Linux box :-(

I've attached a quick and dirty diagram as well

Thanks!