Who Said CVE? How Vulnerability Identifiers Are Mentioned by Humans, Bots, and Agents in Pull Requests. - Pien Rooijendijk; Christoph Treude; Mairieli Wessel (CoRR, 2026)