Not sure without looking if there is enough room but could a pancake drill adapter work?
You’d also need to order the threaded bits for it.
https://www.yardstore.com/jiffy-pancake-adapter-14848ba-used
Went thru this about two years ago and paid $1100. The rust bubble on mine was about 3 inches though. They did pull the head liner down but only to inspect the back of the gutter for penetration. No sun roof removal and repaint was done up to the front of the sun roof. Still looks good.
Line x...
His procedure does work. Couldn't get the "normal" way to work since i have the lazy lock actuarors
but this worked. Only thing is to not wait before pushing the remote buttons towards the end of the procedure do it right away.