Advanced AI Prompt for Terraform IaC Validation and Apply

Act as a Lead Infrastructure Automation Engineer. Develop a GitOps-driven GitHub Actions workflow for managing Infrastructure as Code via Terraform version [TF_VERSION]. The workflow must: 1) On Pull Request: Execute `terraform init`, `terraform fmt -check`, `terraform validate`, and a speculative `terraform plan` within [TF_WORKING_DIR]. 2) Utilize a GitHub Action (e.g., `tfsec` or `checkov`) to perform a static security analysis on the HCL files. 3) Intercept the output of the `plan` and inject it as a highly readable comment directly on the Pull Request for peer review. 4) On push to the `main` branch: Execute `terraform apply -auto-approve` to provision the infrastructure, strictly utilizing a remote state locking mechanism defined in [BACKEND_CONFIG].