Single-Model Attribution for Spoofed Speech via Vocoder Fingerprints in an Open-World Setting