[ncua] add to pending safe.yml