You're using UCS for the hardware platform, right? If so, what made you use the number of vNICs per host? I've seen many UCS / ESXi implementations that go with as few as two vNICs per ESXi host. If you make both of those trunks on the network side, and make them both uplinks on your dvSwitch or 1000v, you can create port groups (or port profiles if 1000v) for the control, packet, and management groups required for the 1000v.
You can run your whole environment on a 1000v without a vSS, though many people prefer to keep at least the vmkernel port for ESXi mgmt on a vSS.
As for VLANs, I'd do a new VLAN for each port group. Those port groups are used for communication between the VEM (on your ESXi hosts) and the VSM (running in the virtual switch itself). If you can avoid it, don't mix 1kv traffic with ESXi mgmt traffic.
mike