Thanks!
I thought the problem was that there were not enough vcpus allocated to the Gateway. I increased from 1 to 3. CPU1 (thread) is still running at 100%, so if I increase the number of vcpus with virsh, it doesn’t translate into allocating more threads to distribute that percentage more evenly and thus reducing fan speed.
But it looks like (if I forget about the constant high fan noise) that the functionality question has to do with the Control Port not being opened on the Gateway. Shouldn’t that already be configured? How should I edit the torrc on Gateway CLI? Then the Workstation can’t sdwdate sync because the Control Port is closed, right?
. . .
onion-time-pre-script detected error status
. . .