Consolidate Core nano packages — Wave 5: cyclic server core

Part of #281232.

**Wave 5 — Cyclic server core.** Tightly interlocked via bidirectional deps; break cycles via shared-type extraction (as in POC `US-020/028`). saved-objects is the ✅ POC anchor; do zero-consumer members next, then the high-churn ones.

| Domain | Pkgs | LOC | Ext | Cycle | Notes |
|--------|-----:|----:|----:|-------|-------|
| saved-objects | 15 | 44,463 | 185 | high | ✅ POC-proven anchor (↔ usage-data, status, deprecations, http) |
| usage-data | 4 | 2052 | 0 | high | ↔ saved-objects; `base-server-internal` exists solely to break this |
| deprecations | 7 | 2124 | 0 | high | ↔ saved-objects |
| status | 4 | 2519 | 0 | high | ↔ saved-objects; integration hub |
| metrics | 5 | 2605 | 0 | high | ↔ elasticsearch; `collectors-server-*` sub-split |
| security | 7 | 2657 | 26 | high | ↔ http, ↔ elasticsearch |
| elasticsearch | 6 | 5213 | 295 | high | ↔ http/security/metrics/status; `client-server-*` + `server-utils` extras |
| ui-settings | 7 | 4816 | 88 | high | ↔ chrome/http/injected-metadata/test-helpers |
| http | 19 | 16,174 | 432 | high | hardest single domain: 6 sub-domains, 9 cycles, 432 consumers |

### Tasks
- [ ] saved-objects
- [ ] usage-data
- [ ] deprecations
- [ ] status
- [ ] metrics
- [ ] security
- [ ] elasticsearch
- [ ] ui-settings
- [ ] http

Start with the saved-objects POC anchor and the shared-type extraction approach referenced in US-020/028, then inspect the listed package domains and their bidirectional dependencies. Done means the nine checklist areas are consolidated and their reported cycles are addressed, including the noted http and elasticsearch sub-splits.

Written by the indexing model from the issue text.