Add an extra button connected to one of the CPU's GPIO pins. Pressing this button and powering up the switch will cause the internal bootloader to enter failsafe/recovery mode.