Pretty much like you said 2010 or newer. I'd steer clear of the pana sunroof. I hear issues with drain clogging up. AWD systems in the newer CTS's is fine. I'd just get a bumper to bumper warranty no matter what. It's basically extra insurance.
My 2012 has keyless and with -8 with a windchill of -20 here in Chicago, I had no issues whatsoever with the keyless entry. They may have corrected the issue. I could never go back to a non-key-less car. Love it (despite being a knob instead of button). The level of confusion when anybody tries to start my car for the first time is hilariousI'm not sure what package it's in, but avoid the keyless entry feature if you can/ it's not lumped in with features you really want. While it's neat to have, the 08's and 09's have issues with them breaking in cold weather (I'm dealing with it now in Detroit). It's about $400/ handle to fix, apparently not covered by extended warranty. Being that you're further north, this might be a headache.
The tsb (SB-09104) does not mention models past 09, so this may have been corrected. I'd definitely check into it though if this option is on a car you're considering.
.