[FEATURE] Reduce system index usage from creating one system per log type for every resource

Is your feature request related to a problem?
Currently, security analytics creates 1 system index for each log type for each resource like findings, alerts, queries, correlations.
These system indices are also rolled over.
If users are creating detectors from 20 log types that would mean Security Analytics creates minimum of 100 different indices all of which will be rolling over.

What solution would you like?

Use the same system indices for a given resource for all log types. that would reduce the number of indices by a factor of number of logtypes used by customer.

What alternatives have you considered?
A clear and concise description of any alternative solutions or features you've considered.

Do you have any additional context?
Add any other context or screenshots about the feature request here.

Start by tracing how Security Analytics creates and rolls over system indices for findings, alerts, queries, and correlations across log types. Map the current per-resource, per-log-type behavior before deciding how shared per-resource indices affect existing operations. Done means index count is reduced while resource behavior and rollover remain correct, with regression coverage.