add executor and garden as submodules

This makes the release not depend on an extra step to grab the bits.
Dependencies are fetched during pre_packaging; currently assumes gocart is in
your path.