Lisa, definitely would be good to hear your progress.
Of your three setups, we have the last 2 already working in our environment -- with the exception of some automated change, versus manual change. We leverage Redwood Scheduler, and it executes some OS-level scripts as the <sid>adm account. As a result, the Redwood system needs to know the <sid>adm password in order to launch those OS scripts. Automatically changing the OS password doesn't update Redwood's configs.
This is one of our more problematic items.
As for the DB changes, we have a plug-in and setup that is working really well for that -- but we haven't attempted for HANA DB, only Oracle 11 and Oracle 12 DB's.
Do you have any MaxDB databases that you will be managing with CyberArk?