renovate: enable submodules tracking

This is a "beta" feature, according to:

https://docs.renovatebot.com/modules/manager/git-submodules/

I am not sure it will actually work the way we want: I suspect it will actually pull the latest ref, and not the latest tag. But we'll see!