I have recently bought 2 dirt cheap thinkpads, one for me and one for the wife.
T490s - i5 intel
T14s - Ryzen 5 AMD
Both are tick all your requirements except for the numbpad, the T14s is definitely worth the extra money, though. It can even handle some medium gaming.
Both have upgradeable nvme ssds. However the ram is soldered on the “s” versions of these laptops so find one with 16gb or more.
Your L14 has one soldered ram module and one socketed module which is why you could upgrade it.
It’s the “s” versions of the thinkpads that have non-upgradeable ram:
T490 - socketed ram, upgradeable
T490s - soldered ram, non-upgradeable
T14 - socketed ram, upgradeable
T14s - soldered ram, non-upgradeable
etc etc
Im not sure about the amd thinkpads as there are some models where the intel version has socketed ram whereas the amd version of the same laptop has fully soldered ram.
The s versions are slightly smaller and lighter
There is a website dedicated to unmasking ice agents
https://icelist.is/