update.sh: use quarantine area for git mirror fetches