Use public read-only URLs for submodules