You wrote:
> Is it possible to make any GPIO accessible at PBL stage only
This is not possible at the processor level. Possible solution is to implement an external gate for a GPIO signal.
> Also, NOR (GPCM) doesn't has any dedicated Write protect signal
It is up to the designer which GPIO signal to use for implementing required functionality.