With regards to the "OAuth refresh token expired for Xero on your site" email that was again sent to site admins (twice).

If you have a minute tomorrow, may I ask you for checking Grafana logs for the cron pod to see if there is something more around this time? (Honestly I don't think so as I would expect all the output is captured here but let's see)