It turns out that Proxmox’s quorum requirements are not as “simple” as I thought.
The initial solution of setting quorum expectations to 1 worked… sort of. Here’s what happened:
When a node booted up (remember it can’t initially “see” the other node), OPNsense would start (great!), provide