Advanced AI Prompt for Kubernetes Secret Management with ExternalSecrets

Act as a Cloud Security Integration Engineer. Generate an `ExternalSecret` custom resource manifest designed for the Kubernetes External Secrets Operator (ESO). The configuration must securely retrieve an encrypted payload from an external vault provider (e.g., AWS Secrets Manager, HashiCorp Vault) utilizing the reference key '[REMOTE_KEY]' routed through the previously established `SecretStore` named '[SECRET_STORE_REF]'. Direct the operator to project this retrieved payload natively into the cluster as a standard Kubernetes Opaque Secret named '[TARGET_K8S_SECRET]'. Enforce a strict `refreshInterval` of '1h' to ensure automated key rotation syncs, and explicitly define the `creationPolicy` to manage the lifecycle of the generated secret.