Thank you for the reference to the "i.MX 6Dual/6Quad Applications Processor Reference Manual" it was quite helpful as it shows on Figure 8.3 that This address 0x0093FFB8 *IS* hardwired for this board.
To answer my own questions, after looking at Chapter 8 and poking around using JTAG:
1. Is this address 0x0093FFB8 hardwired for my board?
Yes. Look at Figure 8-3 to see where ROM is. And then look at 0x00000028 in ROM: it's hardcoded to 0x0093FFBC which is the undefined address vector in OCRAM
2. Is it possible to look it up at runtime (instead of specifying it at link time?)
Yes, using 0x00000028 in ROM as above. But that might not really be reasonable.
3. I found it by digging around in the linker script. Is there a more normal way to find this kind of value? Is there a specification or datasheet I should be referring to?
Yes. Per your answer, read the Processor Reference Manual