$roleRepository not initialized correctly
$roleRepository is set "manually" in
initializeRolesFromPolicy() - only if caches are outdated. But the
$roleRepository is needed even if the caches are up to date, so this breaks (one way to see the effect is to try and create a Neos user on the CLI).