gitlab: use import_role instead of role dependencies

This lets us control when in the play yarn and redis are installed.

Also, flush handlers to make sure any needed Redis restart is done
earlier. Currently it's not a problem, but when we install other GitLab
components, they will need Redis to have been restarted with the new
configuration (Unix socket, etc).