ignore dirty submodule content in git status and diff

All seven submodules are vendored dependencies whose working trees pick up
line-ending noise on Windows filesystems. With ignore = dirty, git status
and diff skip scanning their content (git status drops from ~17s to ~3s on
WSL2 /mnt/c), while changes to the committed submodule pointers still show.