I've now got a bolt coming out of the the firewall that I can secure my sub enclosure with.
First I drilled a hole from the engine bay side of the firewall, all the way through the firewall and through the carpet on the wall behind the seat (with some help from someone holding the carpet flat).
Then I pushed a long bolt through the hole from the engine bay side, then with help from my mate I tightened a nylock nut on the bolt on the cabin side of the firewall (with the carpet and sound deadening still out of the way at this stage).
Then I pushed the bolt through the hole in the carpet and sound deadening, so now I have the end of the bolt poking out of the carpet, so I'll be able to use that to secure the enclosure with a nut on the inside of the enclosure, before I fit the sub to the enclosure.
Thanks to dasic1 who mainly inspired this idea!
I'll put up some photos tonight (they are boring photos).