Jarrod,
the Lync call towards the MCU could be failing because of media encryption incompability, for instance if your Lync environment is configured to required media encryption, which is the default, while the MCU is unable to do media encryption. Without seeing some logs from this call scenario however, it is hard to provide an accurate root cause.
To answer question 2, the B2BUA can only be configured with one signalling destination address, which can either be an OCS or Lync server address. You can however set up static SIP routes from both OCS and Lync pointing to the VCS B2BUA.