Progress! After replacing the 1V2 DC-DC module outright (looked like I damaged a pad when I desoldered it) and swapping the ferrite on the GTX_1V0 output with a shunt, both rails come up.
Ripple is borderline for the 10 mV p-p tolerance for the GTX, but (barely) within spec.
So now in theory I should be able to bring up the 1000baseT PHY, and the only thing stopping me from bringing up the GTXes is now the GTX_1V8 rail.
Then I can look at 3V0_N later.