Yes it is so that by default it comes from eMMC unless you press a shoulder button.
But this must be disabled by MLO or pressing the shoulder button later turns the switch and can't be used as shoulder button any more.
At least this has to be modified.
If you can specify a connector I can design such an SD card shaped adapter. Or if it is sufficient it can have some solder rings for GND and the JTAG lines.
Yes.
We have an EEPROM on the CPU board connected to the same bus which is physically big enough to easily solder three
wires (GND, SCL, SDA) and then trace all activities.
Or even become bus master (if OMPAP5 is silent) to query the Palmas state.