My question is which of them must go in the bootloader and which can be part of the new .HEX file to be loaded
Put them all in the bootloader.

I'd be very leery of letting your bootloader reprogram config settings. If you get them wrong or things hiccup you can end up with a board that won't boot.