Your crystal doesn't have any parameter which would suggest it is incompatible. We have used many crystals from HC49 to smaller SMD ones and so far all have worked just fine.
The ROM on VS1010 is a really a ROM. Not any kind of flash. So you really need SPI flash if the SD card is going to be changed.
Designing hardware and software for systems that use the VS1010 MP3 Audio DSP Microcontroller.