From memory..
Does it answer back on the st-link? The external oscillator won't run unless the flashed code actually enables hse, so it's not a very useful test.
boot0 should be pulled low. boot1 doesn't matter. reset should be pulled low, then high.
Vref+ *and* I think vbat need attention, and are check by the st voltage supervisor, before it turns on the 1.2V core.
check the voltages on vcap1 and vcan2. If they show 1.2V then the core mcu is powered on, and the issue is configuration/higher - eg. swdio wiring or boot0/reset.