Use one run_safe for `feature merge`.

This allows run_safe to print *all* commands that would have run if the
merge was successful.