feat(job): add --gui/--nogui flag, default headless

The Phase-2 VM start was hardcoded to headless. Expose a --gui/--nogui
toggle (default --nogui, preserving current behaviour); --gui starts the
clone with the Workstation GUI window (needs an X display, see §4.7). The
phase banner now reflects the chosen mode.

src/ci_orchestrator/commands/job.py

@@ -390,6 +390,14 @@ def _destroy_clone(
     show_default=True,
 )
 @click.option("--vmrun-path", "vmrun_path", default=None)
+@click.option(
+    "--gui/--nogui",
+    "gui",
+    default=False,
+    show_default=True,
+    help="Start the VM with the Workstation GUI window (--gui) or headless "
+    "(--nogui, the default).",
+)
 def job(
     job_id: str,
     repo_url: str,
@@ -419,6 +427,7 @@ def job(
     ready_timeout: float,
     poll_interval: float,
     vmrun_path: str | None,
+    gui: bool,
 ) -> None:
     """Run the full CI pipeline against an ephemeral build VM.
 
@@ -547,9 +556,10 @@ def job(
         phase_start = _now()
 
         # ── Phase 2/5: start VM ─────────────────────────────────────────
-        click.echo("\n[job] Phase 2/5 — starting VM (headless)")
+        mode = "GUI" if gui else "headless"
+        click.echo(f"\n[job] Phase 2/5 — starting VM ({mode})")
         try:
-            backend.start(handle, headless=True)
+            backend.start(handle, headless=not gui)
         except BackendError as exc:
             raise click.ClickException(f"vmrun start failed: {exc}") from exc