:) Do you have any other non-volatile storage?
Nope.
A serial eeprom might be another good choice, of a location for variables. Anyway I understand the reasons for it and will happily work on brainstorming
By design if you want to change the boot firmware of our device (in production) you will have to de-solder the flash.