They are located at /system/bin/su and /system/xbin/su respectively.
There is only CWM, but it can install unsigned ZIPs (I have successfully done so).
Installation of CWM: Get adb and the recovery.img (forum link) and then flash the recovery following this tutorial. Mind that you’ll have to use recovery.img rather than recovery-cwm-fp1-0.2.img in the adb push command.