Why: recursive submodule checkout reads pinned dep commits; their .gitmodules now carries the new Gitea endpoint base only in the migrated mains. Evidence: host-verified; see Dev PR #706 Impact: pin updates only, part of the coordinated endpoint migration. Refs: Agent-System-Dev PR #706