rEFInd can automatically detect linux, Windows, and mac partitions and boot them. You could just install it to a usb stick and use it whenever necessary.
Can it boot fully-encrypted disks (by chainloading GRUB, for example)?
I have a setup where I moved /boot of the encrypted luks partition to the esp and boot from there using a custom entry in rEFInd