A workflow can clone the main repo but submodule fetch still fails

A monorepo with private submodules starts failing only after nested repositories are switched to SSH references.