This removes script-wide shellcheck excludes to avoid unintentional
errors and moves the excludes to the scripts where they are necessary.

This displays the branch, repo and commitID that was attempted to update to but
failed. Users then can compare this output to the configuration they meant to
activate in modules and hopefully better find their typos.

Switching branches and applying patches in the build repos will
unnecessarily touch many files, causing rebuilds of packages that didn't
really change; furthermore, it is filling the reflog with many entries.

Don't ever switch to base branch in the build repos and apply patches in
a temporary clone to avoid these issues.

In addition, GPG signing is generally disabled in the build repos to
override potential global configuration (as signing doesn't make sense and
will slow down rebases).

Suggested-by: Steffen Möller <steffen_moeller@gmx.de>

Possibility to work with git submodules

This fixes `make update` not working correctly when GLUON_SITEDIR is set
manually.

If a given commit is not included in the master branch, the update script fails.