ci: Clone tf-m from github mirror

The upstream tf-m repository is consistently unreliable, and causing
numerous CI failures.  Fix this by cloning from a github mirror
maintained by this project.

As the commit is pulled by sha, updating this mirror can be done
manually when this is updated.

Signed-off-by: David Brown <david.brown@linaro.org>