Hi,
i think you can usw HSRP for the local fail over. You should use the MPLS VPN connection for primary usage (do you use dynamic routing protocols in your MPLS VPN?) and also a dynamic routing protocol between the 2801 and the pix. (i hop the pix support it ... i have'nt use the pix at this moment).