I'm putting this here so that others don't make the same mistake.
In PVE's GUI, the iSCSI plugin (Datacenter > Storage > Add > iSCSI) doesn't offer a parameter to configure the username/password for Mutual CHAP authentication. I added the credentials to /etc/iscsi/iscsid.conf and tested with...