Status update: almost everything works in debian13/4.3 combo, trying to work around Compliance with RFC 7686 is breaking transparent Tor proxying - #2 by Patrick - Development - Whonix Forum with curl8 and fix wifi.
UPD: fixed the curl issue. The workaround is weird (explicitly specifying proxy in dom0 dnf.conf, since dom0 has no networking it does nothing but looks ugly)