The following solution/workaround does not require adding a token into your repo.

Just create a new cloudflare workers/pages project, and add the github submodule repo. You can assign it to only deploy via an empty output/build folder. This results in cloudflare having access to the submodule repo and the original project where the git submodule was failing will now clone successfully.