Does Valve just have an internal Russian entity that processes with a domestic payment processor, then?

All of the international payment processors (ie, anyone piggybacking off Visanet) are in compliance with the sanctions.