[commerce] add to safe.yml