Do submodule updates in a temp worktree

This removes the need for stashing (nice!) and ensures that the update
checks happen and are pushed regardless of the status of the main
worktree (presumably $HOME).

The main worktree update then just needs to merge the changes if it can
then update all submodules.