Prevent publishing new scoped packages without scope role

The VDU was appropriately checking for the scope role on updates, but
was bailing early on initial publishes.

This fixes that.
v2.6.1