track submodule branches; bump everything
add ci/bump.yml