Update recipe submodule to read-only URL