How would you design a Jenkins pipeline to safely deploy a critical update to a production Kubernetes cluster at Intuit?