Can you try to compare the non-working opensuse-secureboot and the working OpenSUSE entry in detail? The "ESP: Cannot find or access mount point of ESP." error of bootctl looks suspicious, but that might be some weirdness in systemd as /boot/efi/ is mounted according to y2logs.