rules: Don't attempt to update git submodules

The operation could potentially try to use the network, and
more generally speaking it's not a good idea for the upstream
source to be modified outside of the blessed mechanisms.