reorg of vulnerability notifications

The new document is in tutorials. The old document is still in /administration but with a reference to the tutorials doc.