Looking at this the reason that the 28c256 needs the rom writing to the upper half is that Vpp which is normally on pin 1 of a 27C256 is A14 on the 28c256 so presumably will be supplied with vcc on the beeb? (it's much higher for programming).
I think you just need to make sure Pin 27 (a14 on the 27c256) is tied high to get the upper address range? (lift leg and solder blob to pin 28, or just check 27 with a multimeter first - worst case it won't boot if it's grounded or floating)
Hopefully someone with more of a clue will be along shortly to ratify/debunk this

