Well,
sight of the forest has been lost due to all the trees in the way !
Whether the pump runs or not, or whether there is or isn't injector pulse is for now irrelevant.
Its the starter than is the current issue. Once the starter engages and cranks the engine then IF there is still a starting issue that can be addressed. In diagnosing anything, be it human disease or mechanical, one thing at a time.
The starter...as simple as a failed or sticking
starter enable relay.
If that not be the problem then move on to starter electrical and key/ignition switch electrical. If the starter enable relay is functional and power IS flowing to both sides of that relay, then the question is "why is the starter motor not turning"?
Is there power to the solenoid? if so, that allows us to make a conclusion...the solenoid or starter motor is bad.
No power to the solenoid? trace the circuit backwards until you find the last or most recent place where there IS power. The fault is there. This exercise will lead you to the ignition switch/ key switch or wire between the steering column and starter.
The FSM will provide simple test to pin down the area of fault. Follow those and I can assure you that you will be able to find what the real problem is.
My best guess with the facts that have been presented and knowing some odds, and probabilities,...I'd go to the starter enable relay and jump that and chances are that will be the problem.
Regarding the fuel pump running during a security system alert, Oz is correct that the pump CAN run even with the security lite flashing. The pump has a 2nd circuit that allows power even if the primary circuit is laying in Utah. The pump does NOT always run, based on a number of things that the ECM decides (inj pulse, dist reference, TPS position) , but it CAN run during a security lock-out. The implied conclusion that it shouldn't is not accurate....VATS locks out the fuel injectors, and isolates the starter, not much else.
So, the system CAn still pressurize and the pump CAn run but the injectors cannot operate without permissions via VATS module thru the ECM that collects the necessary inputs and grants permission, If I am communicating this properly......
