Fix lint jobs: disable submodule fetching

Lint jobs don't need submodules - they already exclude ./submodules
from scanning. This prevents failures due to submodule fetch issues
on public runners.