bootstrap.sh: add a bit more intelligence

A couple of simple fixes:

* use ssh urls when we have an SSH_AUTH_SOCK
* don't blat existing checkouts
* check for git-core before sudo apt