Credits sourced from carbon project that was centred on biomass power plant in Xinjiang, investigation finds BP and Spotify bought carbon credits at risk of link to forced Uyghur labour in China…