Make sure vsys import is on the top of the spec

The order matters, security zone imports cannot be done for interfaces
that have no vsys import configured.

Author: kklimonda-cl

specs/network/interface/ethernet.yaml

@@ -85,6 +85,19 @@ imports:
   - variant: layer3
     type: template
     locations:
+      - name: vsys
+        required: true
+        xpath:
+          path:
+            - vsys
+            - $vsys
+            - import
+            - network
+            - interface
+          vars:
+            - name: "vsys"
+              description: "The vsys."
+              default: "vsys1"
       - name: virtual-router
         xpath:
           path:
@@ -115,19 +128,6 @@ imports:
               description: Logical Router Name
             - name: vrf
               description: Logical Router VRF
-      - name: vsys
-        required: true
-        xpath:
-          path:
-            - vsys
-            - $vsys
-            - import
-            - network
-            - interface
-          vars:
-            - name: "vsys"
-              description: "The vsys."
-              default: "vsys1"
       - name: zone
         xpath:
           path: