The Federal Deposit Insurance Corp should have been more aggressive in policing First Republic Bank’s risk management prior to its May failure, but it was unclear if that would have saved it given the speed with which depositors yanked their money, the agency said.