[ncua] add to safe.yml