Hello Wai,
I may be wrong but I don't think you can at the same time over a single SVI to offer L3 VPN and L2 VPN services.
However, I would suggest to divide your links/requirements: the two CE-PE1 and CE-PE2 links will be VRF access links from the PE point of view and you can use a dynamic protocol.
Routing protols can provide all the failover and redundancy you are looking for.
The PE Routers will be interconnected via MPLS backbone links.
If you miss your own backbone infrastructure you can use CSC (Carrier Supporting Carrier) or lease simple EoMPLS /VPLS links from a provider (this may need some thoughts about MTU)
hope to help
best regards
Giuseppe