LGTM. Clean ESM-to-IIFE conversion for ext/process/40_process.js + ext/http/{00_serve.ts, 01_http.js, 02_websocket.ts}, mirroring the pattern already landed for ext/web (#33760), ext/cache/ext/canvas/ext/crypto (#9499507), and ext/telemetry/ext/cron (#5a970fa). CI fully green at this head: 99 success, 1 skip, 0 fail.

What I verified

Module conversions:

• ext/process/40_process.js: ESM import { core, internals, primordials } from "ext:core/mod.js" → IIFE const { core, internals, primordials } = globalThis.__bootstrap. All export const/export function declarations stripped to local + returned in the IIFE result object. ✓
• ext/http/00_serve.ts, 01_http.js, 02_websocket.ts: same conversion pattern. ✓
• The four exported Symbols (kExtraStdio, kIpc, kNeedsNpmProcessState, kSerialization) are returned in the IIFE result so consumers can destructure them via core.loadExtScript().

Consumer updates (all the import sites I could trace):

• runtime/js/90_deno_ns.js:17-19, 27: switched import * as to core.loadExtScript() for all four converted modules. ✓
• runtime/js/99_main.js:53: registerDeclarativeServer named import → destructured from core.loadExtScript("ext:deno_http/00_serve.ts"). ✓
• ext/node/polyfills/child_process.ts:51: kNeedsNpmProcessState named import → destructured from core.loadExtScript("ext:deno_process/40_process.js"). ✓
• ext/node/polyfills/internal/child_process.ts:80: kNeedsNpmProcessState + nodeSpawnChild + nodeSpawnSyncChild → same pattern. ✓
• ext/http/01_http.js:33: _ws named import from sibling 02_websocket.ts → also via core.loadExtScript(). ✓

import.meta.log → internals.log (00_serve.ts:587, 612, 879, 894, 911, 928, 988, 1033): IIFE-wrapped scripts can't access import.meta, so the 8 logging call sites switch to internals.log. Verified the substitute exists at runtime/js/99_main.js:145 (internals.log = function internalLog(levelStr, ...args) { ... op_internal_log("ext:runtime", level, message); }) — equivalent to import.meta.log with a fixed source URL. ✓

Smaller observations (non-blocking)

• // deno-fmt-ignore-file is added to all four converted files. Matches the convention from #33760 and earlier — IIFE-wrapped scripts often have a slightly idiomatic indentation pattern that dprint would otherwise reformat.
• The IIFE conversion is the right shape for the V8 module-namespace concern that bit OffscreenCanvas in the original #33760 — when an ESM converts to a script, anything that did import * as ns and used ns.foo lookups breaks because there's no module namespace anymore. This PR converts both producers and all consumers atomically, so the namespace-lookup hazard doesn't apply here.
• op_http_websocket_accept_header and op_http_ws_create_from_stream_resource in 02_websocket.ts are now sourced from core.ops (the runtime ops object) instead of the static ext:core/ops ESM. Equivalent at runtime; just a different access pattern.
• The diff doesn't touch the panic-trace-relevant or --inspect-relevant paths, so the prior-session snapshot panic class (08_text_encoding.js was not passed as an extension module) doesn't apply here either.