Spec 1 — de-risk spike

Xero connection

Xero is not configured

Add XERO_CLIENT_ID, XERO_CLIENT_SECRET and XERO_REDIRECT_URI to .env.local (see .env.example), then restart the dev server.