I have tested kernel in kernel-default-6.0.8-1.1.x86_64 rpm for openSUSE TW. It also works for booting with PcdDxeNxMemoryProtectionPolicy=0x4. But the same kernel can not boot with grub2-x86_64-efi-2.06-31.1.noarch. I will put shim to openSUSE:Factory and also produce a OVMF with PcdDxeNxMemoryProtectionPolicy=0x7BD4 for debugging.