Change MemberRole namespace validation

For adding support for instance-level custom roles we need to:

• remove the validation of namespace presence on MemberRole. We also need to remove member_role.namespace_id not null constraint.
• change Member#validate_member_role_belongs_to_same_root_namespace validation - if a member role is defined for an instance, we don't need to validate the namespace hierarchy