[P2] Upgrade safe-settings 2.1.17 → 2.1.19

[nbrieussel]

Why

probot v14 was fixed in 2.1.19 via PR #949. The 3 remaining bugs are already worked around in this repo.

Merge checklist

• Dry-run from branch: gh workflow run safe-settings-sync.yml --ref <branch> -f nop=true
• Dry-run output clean (no unexpected diffs)
• No regression on bypass / contexts / suborgs

Audit report — section 5

[nbrieussel]

Update 2026-04-14: 2.1.19 tested — NOT safe to upgrade

Tested in PR #15 dry-run gate. 2.1.19 crashes immediately on boot:

Fatal error during full sync: TypeError: Cannot read properties of null (reading 'info')
    at performFullSync (full-sync.js:7:14)

PR #949 fixed the octokit .rest.* namespace calls but createProbot() still initializes the probot logger as null before performFullSync runs. The crash happens before any settings are read.

Reverted back to 2.1.17 in both safe-settings-sync.yml and pr-dry-run.yml. This issue remains open — upgrade only once a version that actually boots cleanly in NOP mode is identified.