Advanced AI Prompt for Kubernetes Helm CD Workflows

Act as a Kubernetes Release Engineer. Create a Continuous Deployment (CD) GitHub Actions workflow targeting the [CLUSTER_NAME] Kubernetes cluster. The workflow must strictly: 1) Trigger only upon the creation of a semantic version tag (e.g., `v1.*`). 2) Execute `helm lint` on the chart located at [HELM_CHART_PATH]. 3) Authenticate to the cluster using short-lived credentials via OIDC. 4) Perform an atomic `helm upgrade --install` into the [NAMESPACE] namespace. 5) Implement a robust rollback strategy (`--atomic` and `--cleanup-on-fail`) if the deployment fails health checks. Integrate manual approval gates utilizing GitHub Environments for production safety.