AP aware requires "authentication override" in OnePolicy.If I remember correctly, the x250 has been so long end-of-life (2018) that it never supported the OnePolicy-functionality at all.
The problem here is most of the time the timeout of the FDB entry. If you haven't done so, you can check the following kb article with some options: https://extreme-networks.my.site.com/ExtrArticleDetail?an=000057116
yes, you can partition the qsfp+ ports to 4x10Gb and then use a suitable solution to physically split the connection to four 10Gb links.. one such option is via the MPO transceiver that you mentioned and the 10332 cable... and yes, 10332 has a MPO co...
I guess the main question should be: how long do you need firmware updates for?The x590 is not supported in the newest main-branch (33.x) anymore, but as long as 32.x is still maintained (it now moves from feature branch to maintenance branch) there ...