Just a side note -- *whatever* ends up being done, please please please add a binding to debian-changelog.el (whenever it gets returned to dpkg-dev, where it was lost months ago, grumble) that, say, prompts for a number and inserts the correct tokens.
For extra credit, a hook that looks at bug-closure tokens and invokes w3 (or whatever the standard lookup-url-hook is) on them such that the bug report gets pulled up, for easy double-checking that it's the right bug...