Booted to live and used gparted. had to fiddle with un-encrypting/re-encrypting the partitions in order to move everything around correctly, but everything was successful.
nothing ended up needing to be updated in boot. systemd-boot is so basic that so long as the uuids don’t change, then it don’t care.