So, this is where the lower cost 28 pin NMOS 6502 CPUs which addresses 4-8kbyte with varying pins bonded out come in, coupled with a 2716 EPROM - we might need to cheat a little on dates for the SRAM with a Mostek MK4801 or MK4802.
This leaves an async serial solution that forgoes an expensive (in the 1970s) UART - after many years the IRQ pin has been programmed for RX input with a memory mapped D type FF for TX output, but it would be cooler to do an unused opcode hack like you suggested with the 65C02, if technically possible.
There is this neat hack by c0pperdragon but it requires ML pin, which the 28 pin devices don't have
https://github.com/c0pperdragon/SingleB ... /mainboard
-- Jeff