update-pull-request appears to always append a footer.
It should honor safe-outputs.update-pull-request.footer: false (consistent with other safe outputs).
Expected: when footer: false, no visible footer is added to PR body updates.
As a workaround you can provide a relatively short/blank footer to messages.footer but that's a bit annoying.