maint.mk: make "check" depend on public-submodule-commit by default