fixed: workaround issues with ExternalProject_Add

if you use the builtin git update command, a build is triggered
every time. instead, manually use a checkout