> github's issue tracker doesn't allow attachment, and thus it inadvertently promotes this "pull requests from out of nowhere" behavior.

"Refs #XXX" in the description (PR or any commit) ?