settings: use git_buf for returning strings

This survived the last round of culling, as the signature is only in the
comments.