Make sure we only emit 'destroy' for a notification once

Make sure we only emit 'destroy' for a notification once

There are multiple code passes that can result in Notification::destroy()
being called, such as a notification being closed by the application
when it exits and the associated source being removed at the same time.
However, we should only emit 'destroy' for the notification and
do the associated work once.