You can put a volume pot on the amplifier, the only reason most amps do not have one is it limits their market to customers with only one source. What you have to take into consideration is what input impedance your source wants to see. Anything above 10k ohms should work fine. I would go with a shunt volume control as it only puts one (series) resistor in the signal path and I would use a series resistor of 15K ohms, high enough for a respectable input impedance through the volume steps and low enough to keep out noise. You could also include a balance control if you want, just place it upstream of the volume pot.
If your amp has a 4-ohm tap, you can use that with no problem. The power output does not change, but the current draw will be higher as the output xfmr tries to maintain voltage at the lower reflected impedance (power is consumed at the speaker, NOT the amplifier). Any limitations on the amplifier will show up here in the form of voltage drop and distortion as the tubes are asked to work harder. However, it should not affect anything if you listen at reasonable volumes.