You'll have add a mesh profile in order to connect the two AP-367s together. For the wired port on the remote AP-367, I would probably run that in tunnel mode so that the wired port is treated the same as the wireless users who access the remote AP.
Unless you are currently running bridge mode for your existing SSIDs on the controller, the recommendation is generally to use tunnel forwarding mode.