Private submodules need to be in the same organization

We are using GitHub App installation tokens for repository cloning, and those tokens are Org-scoped.

So if a private submodule is in another Org it will fail to clone.

See: https://balena.fibery.io/Inputs/Research/Cross-org-dependencies-in-Flowzone-workflows-302