Turns out there's an easy way to restore my files and firewall settings.
Here's what I did for each VM:
1. Create a new appvm of the same name and type as the old one (with the
old ones in a different location of course).
2. Start then stop the appvm (to ensure it's properly initialized).
3. Copy the firewall.xml, private.img and volatile.img files from the
old one to the new one.
4. Start the appvm, and everything's back where it should be (other than
menu customizations, and possibly previously installed apps).
I don't know if all these steps are required (particularly #2, and both
img files in #3), but the recipe works, so I'm sticking with it.
The hardest part was actually restoring the old appvm files, given the
deliberate roadblocks to moving files into dom0.
Thanks,
Ron