We rewrite submodules to point to the deployment server in the cache
prior to running git submodules update but after we run git fetch.
This is problematic because git fetch will recurse into submodules if
there has been a submodule bump in the parent repo by default. The
correct behavior is to never fetch submodules until after all submodule
urls are rewritten.
This is currently affecting ORES after the deployment server