Add initial Makefile

The initial Makefile only supports `make init`, which will make sure all
submodules are cloned and have reasonable remotes configured.

`make init` is not yet idempotent so is not safe to run multiple times.