Ok, didn't receive any time-saving pointers. I tinkered around a bit more.
Got dropbear working, so that was it for item 2. For item 3, I unpacked /dev/mtd1, changed the admin username and repacked it, Had to compile a new busybox with the flashcp command to be able to write that back to mtd1...