I'm almost done with my bootloader that copies the flash to RAM and patches it. I haven't had a lot of time to work on it, but it's pretty simple.
If that works, and we can't flash it otherwise, then I've already got most of the design for a mod chip to plug into the serial port and download the code. Pretty much just a PIC and a serial EEPROM with the code in it (I've mocked it up on my eval board).
If we can't get flash working, I'll get cracking on a board design for a mod chip to plug into that serial port.