Weakly Supervised Vulnerability Localization via Multiple Instance Learning