Hi Dan and Gordy,
I think there are a few misunderstandings about the RTC and VBAT that are muddying the waters here. I'd like to start with a bit of information...
The RTC_CLKOUT pin is actually in the main VDD domain, the pin is NOT in the VBAT domain. So you should know that RTC_CLKOUT will not toggle if the main VDD =0. RTC_CLKOUT also goes away in some of the low power modes. Because RTC_CLKOUT is in the digital domain, enabling that pin function doesn't affect VBAT current draw (although enabling the oscillator and the RTC itself does as that is all in the VBAT domain).
Also the VBAT domain is a completely isolated domain. There isn't any internal switching so that VBAT is powered from the main when it is available, so for a given RTC configuration and temp VBAT current draw should be fairly stable and doesn't vary based on what is happening with VDD or the power mode of the CPU. The exception is when the core is accessing RTC registers as that generates activity in the VBAT domain.
To answer your questions now...
1. The second set of IDD_VBAT specs in Table 7 are what you want. This is with the RTC and 32kHz osc enabled which sounds like the configuration you will be using. You can't access the registers using the CPU if VDD=0, so this spec covers the VDD=0 case.
2. Not much. As I described above, RTC_CLKOUT is not in the VBAT domain, so it doesn't affect current draw. RTC_WAKEUP is an active low, open drain pin so it won't cause the normal state current to go up if enabled. You'll get a slight bump when the pin asserts based on the pullup resistor value and loading on the pin.
3. I'm not quite sure how to answer this one. If you don't have the RTC enabled, then that would definitely decrease current, but you want to use it, so I don't think that is what you are asking. I guess I can say that the current draw when VDD is powered shouldn't be different than when VDD=0.
Hope this helps,
Melissa