Bump cis role submodule to ff603eb