Security Bug Report Prediction Within and Across Projects: A Comparative Study of BERT and Random Forest