Advanced AI Prompt for Kubernetes RBAC Role and RoleBinding

Act as a Kubernetes Cluster Security Administrator. Engineer a strictly scoped Role-Based Access Control (RBAC) manifest configuration following the absolute Principle of Least Privilege. First, define a `Role` confined exclusively to the '[NAMESPACE]' namespace that authorizes only the specific '[VERBS]' operations (e.g., get, list, watch) executed against the '[RESOURCES]' (e.g., pods, secrets) within the designated '[API_GROUPS]'. Second, define the corresponding `RoleBinding` that cryptographically attaches this granular Role to the specific ServiceAccount '[SERVICE_ACCOUNT]'. Ensure comments detail why cluster-wide ClusterRoles were intentionally avoided to prevent lateral privilege escalation.