Today succeeded in getting my board to boot. It required careful attention to the RESET_b signal pullup resistor and load capacitance values. The RC time constant must be 10us. My thinking was to attempt to stretch the width of the time the RESET_b signal was deasserted by the K60 by slowing the rise time with load capacitance. I have found a 10K 1nF pair on RESET_b provides maximum width, and this is enough to allow the JTAG pods to connect.
With 10K pullup and no capacitance, when the K60 releases the open-drain RESET_b to float, RESET_b rises to 3.3V very quickly. Somehow the K60 internally detects a rise above some voltage threshold, determines it is time to jump to vector zero, finds it to be invalid, and hard resets itself again. The resulting time out of reset is 2us. This is too short for inexpensive commercial JTAG pods to respond to.
With 10K pullup and 0.1uF capacitance as recommended by KQRUG, when the K60 releases the open-drain RESET_b, RESET_b rises to 3.3V very very slowly and the K60 resets itself before RESET_b even reaches 3.3V. JTAG pods never recognize the K60 getting out of reset and so cannot connect. [The TWR-K60 has 0.1uF capacitance on RESET_b, but doesn't have a pullup resistor at all -- maybe the on-board OSBDM works ok under these conditions and has a stiffer internal pullup -- I do not have time to investigate this.]
With 10K pullup and 1nF capacitance, when the K60 releases the open-drain RESET_b, RESET_b rises to 3.3V slowly enough to stretch the time the K60 is out of reset from 2us to 10us, while also allowing RESET_b to reach 3.3V. This appears to be just enough for commercial JTAG pods to respond and connect.
In the end, no pullups on any of the EXP_ signals are needed. The only issue is RESET_b -- it requires a 10K pullup to +3.3V, and a 1nF capacitor to GND. The exact values do not matter, but the RC time constant must be approximately 10us.
Steve