Advanced AI Prompt for Secret Management with HashiCorp Vault and GitHub Actions

Act as a CI/CD Security Architect. Engineer a GitHub Actions workflow that dynamically retrieves highly sensitive deployment secrets from an enterprise HashiCorp Vault cluster, entirely eliminating GitHub Repository Secrets. Utilize the official `hashicorp/vault-action` to authenticate against [VAULT_ADDR] utilizing the GitHub OIDC JWT integration. The workflow must assume the specific [VAULT_ROLE] and pull a JSON payload of database credentials from [SECRET_PATH]. Inject these secrets directly into the runner's environment variables strictly for the duration of the deployment step targeting the [K8S_SERVICE_ACCOUNT]. You must provide the corresponding Vault HCL policy that restricts this [VAULT_ROLE] from reading any paths outside its designated scope and ensures the secrets are wiped from memory immediately after use.