Add build system functionality to detect incorrect submodule commits being checked out

[whitequark]

This has been a recurring, persistent papercut in building ngscopeclient since before it was ngscopeclient, with the latest iteration in #970 (comment). Let's fix this with better tooling.