Easiest is probably to put 'em both in a VG and have a single LUKS+btrfs LV, but I’d prefer the information that there are two drives to propagate to the FS level.
Anw! It turns out that searching for “encrypted btrfs root add disk” yielded a bunch more results. This person got through all the bits I’m worried about, but had to enter their password twice:
Two apparent successes that I can’t grasp enough to confidently apply:
Obv this is far, far easier with separate /boot, but I remember that doing that on Tumbleweed means no boot-to-snapshot. Hrm.