#25329 fleet: cmux-tui-rust-check vm-cli mode builds and tests the cmux-vm CLI, returns its binary

Summary

Adds a vm-cli mode to scripts/ci/cmux-tui-rust-check.sh, the allowlisted fleet step: clippy and tests of the cmux VM operator CLI (workers/cmux-vm/cli, its own workspace and lockfile), then a release build of cmux-vm returned as .build/artifacts/cmux-vm (macOS arm64, fetched with cmux-ci run ... --artifact). It works like the existing rd-bench and rb-testhost modes.

Why: agents may not run cargo on a developer Mac, and the fleet refuses a changed allowlisted script until it lands on feat-cmux-next. Without this mode, nobody can drive a preview or staging cmux VM API with the operator CLI from a Mac. I need it for the live verification of the provider-parity CLI work (integration branch codex/vm-api-freestyle-parity).

No CI job, gate or budget changes; the mode runs only when someone submits it.

Testing

• bash -n scripts/ci/cmux-tui-rust-check.sh passes.
• The fleet refused it on an unlanded ref (step 1875206a863e542356f49fcc: "not the reviewed version"), as designed. It will run once this lands.

Observed / Not run

• Observed: syntax check, and the refusal above.
• Not run: the mode itself; it can only run after landing.

Changelog

none

🤖 Generated with Claude Code

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}