Towards Stable Backdoor Purification through Feature Shift Tuning