Advanced AI Prompt for GitHub Actions Terraform State Automation Pipeline

Act as a Lead DevOps Automation Engineer. Create a highly secure, production-ready GitHub Actions YAML workflow for the infrastructure repository [GITHUB_REPO]. The pipeline must adhere to strict sequential stages: 1) Initialize the runner with [TERRAFORM_VERSION] using `hashicorp/setup-terraform`. 2) Authenticate to AWS securely leveraging OIDC (bypassing the outdated [AWS_CREDENTIALS_SECRET] long-lived keys). 3) Execute `terraform init` and `terraform fmt -check`. 4) Execute `terraform plan` and utilize a script to inject the formatted plan output directly as a Pull Request comment. 5) Implement a protected `terraform apply` job that triggers *only* on a merged push to the `main` branch, protected by an explicit GitHub Environments manual approval gate. Ensure state locking is enforced throughout the entire run.