If VLAN 11 is provided as the native VLAN on all Instant AP's, you should NOT configure Uplink Management VLAN. Leave that empty.
If you want to put clients in that VLAN (NOT RECOMMENDED, split IAP management from client traffic whenever possible), configure them on the SSID to Client VLAN Assignment: Default. Which will drop the clients in the default VLAN.
VLAN 11 is handled as the native VLAN in the Instant APs.
The Uplink Management VLAN option is only needed if you require the management VLAN to be a tagged VLAN; and I would recommend not going that direction as the Instant APs indeed need to be configured manually for that.
Your design looks good with untagged 11 as management and tagged VLANs for client traffic. Just don't configure the Uplink Management VLAN.