sbc-auth service account was missing a role in PROD (had it in DEV and TEST), so grabbing the email list would fail worked with Andriy and Patrick and resolved this
EFT Refund panel wasn't showing up if $0 was remaining, we needed another condition - thanks Rodrigo & Ody