Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli

...