The systick_handler is located at 0x4d14

Wich is in the P-Flash (Exactly as you said)

I assume that in your SDK application, the vector table is SRAM.
Therefore, I conclude that the vector table is not in SRAM.
I suppose this is why, in the AN12323 app note, the bootloader is put in the FlexMemory:

The bootloader memory map:

If the SysTick is causing this failure, it is because you have either the Systick handler in PFlash or the Interrupt vector table is in PFlash or both.
But, in the AppNote example, the Interrupt Vector is still in the PFlash:

Why is this not a problem?
Thanks.
ps.
I don't want to use too much of your time, so if you have a good reading on microcontroller memory fundamentals, please let me know.
Gabriel