Move `notification.php` to the `backup` directory

`notification.php` is unused, so it's safer to keep it in the
`backup` directory, which is not accessible over HTTP.