I curious what is in that ntfs partition at the end of your windows drive, if it’s not needed you may be able to use that.
I’ve never shrunk a bit locker partition before but it should be possible, worst case you decrypt the drive resize then reencrypt.
the uefi should boot from the first drive that has a valid boot partition. . if you have multiple boot partitions then you would have to select the drive to boot to from the boot menu. if that is what you want then I don’t believe it matters if the partition is at the beginning or end of the drive. I would try and shrink you partition by about 500mb partition and format the empty space as fat32 then use the steps I mentioned to setup your windows boot.
I can show you how to restore the windows boot but I’m not exactly sure what it will do to your Linux boot.
if you have a windows install USB boot to that.
once you get to the first screen hit shift-f10 this will open a command prompt
type diskpart
type list vol
this will show you your volumes and drive letters you will need to determine the drive letter of your windows install
next determine the the volume number of your fat32 uefi partition
type sel vol 2 (or whatever the number of your uefi vol is)
type assign (this will give the selected a drive letter)
type list vol again and see what letter is assigned
type exit to leave diskpart
type bcdboot x:\windows /s y: /f uefi
where x: is your windows partition and y: is your uefi partition
that’s for mbr/legacy not uefi
you can use qiv , it’s in the repos