The scheduler enumerates every user_identities row (ListAllUsers) and ran a discovery pass for each — including users who never connected a video source. Their per-user runner then tried to resolve a YouTube refresh token that was never minted, logging a spurious "secrets: ref not found: youtube/<uid>/refresh_token" every tick (e.g. stale Dex-era orphan identities left by the Authentik migration). Skip users whose ConnectionsForUser is empty before running their pass. Removes the recurring noise — which actively misled a debug session into thinking a healthy onboarded user was broken — with no change to connected users. Refs #7 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>