Enabling Secure Boot after dual boot already set up without it? Win 10 > 11 requirements

Which is not signed by Microsoft and so will not work as the primary bootloader when Secure Boot is enabled.

So, openSUSE should just work with Secure Boot as long as you boot into openSUSE shim directly.