Update .gitmodules to use read-only urls