@JRV Thanks for reaching out.
1) When I disable sync, do AAD credentials remain the same? Yes, it remains the same
2) If I add an AD account while sync is disabled, and create a mailbox for it in Exchange using the same credentials, presumably, the mailbox will sync to MS365 via OA and be accessible by the user during migration. After migration, when I re-enable sync, will the new mailbox account "connect" to the AD account automatically?
If you make sure that the UPN remains same and also there is no violation for the proxy address about their uniqueness (must be unique across org) Then Azure AD should Ideally match the account automatically with a feature we call Soft Match
You can read more about it here.
-----------------------------------------------------------------------------------------------------------------
If the suggested response helped you resolve your issue, please do not forget to accept the response as Answer and "Up-Vote" for the answer that helped you for benefit of the community.