clone, then use pax to hardlink submodule objects

it's probably not safe to hardlink *everything*, as mutations that
happen in the build directory would then be reflected in the cache,
so let's try letting git handle most of it, and then hardlink the
submodule objects ourselves.