Yes, something like that exists, as I learned on the #denog IRC channel today: RAD has a "System on an SFP" product line, where the SFP OS is inband-manageable (presumably through an additional management VLAN tagged on the switch port, but I couldn't find any details). Someone on #denog used the STM-1/OC-3 variant for some time.