docs: fix Tony's Wall of Heroes — present tense + restore to Resistance #3

Special section: reworded as continuing ally, not past tense. "Drives"
not "drove", "keeps bringing" not "brought".

Resistance list: restored as #3 contributor (after Yasin and Youness)
with full contribution details. He belongs in both places.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: Lightheartdevs

README.md

@@ -331,7 +331,7 @@ Dream Server exists because people chose to build instead of wait. Every contrib
 
 Thanks to [kyuz0](https://github.com/kyuz0) for [amd-strix-halo-toolboxes](https://github.com/kyuz0/amd-strix-halo-toolboxes) — pre-built ROCm containers for Strix Halo that saved us a lot of pain from having to build our own. And to [lhl](https://github.com/lhl) for [strix-halo-testing](https://github.com/lhl/strix-halo-testing) — the foundational Strix Halo AI research and rocWMMA performance work that the broader community builds on.
 
-And to [Tony363 (Tony Siu)](https://github.com/Tony363) — head of [Coffee and Code Philadelphia](https://www.meetup.com/coffee-and-code-philly/), early advocate, and relentless builder. Tony drove developer outreach and ecosystem growth that brought DreamServer to new communities, then backed it up with code: 95% test coverage, architecture documentation, CI fixes that unblocked every contributor, and bug reports that made the installer bulletproof. The rare kind of ally who shows up, ships, and brings others with him.
+And to [Tony363 (Tony Siu)](https://github.com/Tony363) — a critical continuing ally and friend. As head of [Coffee and Code Philadelphia](https://www.meetup.com/coffee-and-code-philly/), Tony drives developer outreach and ecosystem growth that keeps bringing DreamServer to new communities, and backs it up with code: 95% test coverage, architecture documentation, CI fixes that unblock every contributor, and bug reports that make the installer bulletproof. The rare kind of ally who shows up, ships, and brings others with him.
 
 ### Community Builds
 
@@ -360,6 +360,7 @@ And to [Tony363 (Tony Siu)](https://github.com/Tony363) — head of [Coffee and
 
 *   [Yasin Bursali (yasinBursali)](https://github.com/yasinBursali) — Fixed CI workflow discovery, added dashboard-api router test coverage with security-focused tests (auth enforcement, path traversal protection), documented all 14 undocumented extension services, fixed macOS disk space preflight to check the correct volume for external drive installs, moved embeddings platform override to prevent orphaned service errors when RAG is disabled, fixed macOS portability issues restoring broken Apple Silicon Neural Engine detection (GNU date/grep to POSIX), fixed docker compose failure diagnostic unreachable under pipefail, added stderr warning on manifest parse failure in compose resolver, fixed socket FD leak in dashboard-api, added open-webui health gate to prevent 502 errors during model warmup, hardened ComfyUI with loopback binding and no-new-privileges on both NVIDIA and AMD, fixed Apple Silicon memory limit variable mismatch, added `set -euo pipefail` to the installer catching silent failures, secured OpenCode with loopback binding and auto-generated passwords, added missing external_port_env to token-spy and dashboard manifests fixing hardcoded port resolution, fixed Apple Silicon dashboard to show correct RAM and GPU info using HOST_RAM_GB unified memory override, added VRAM gate fallback for Apple Silicon so features no longer incorrectly show insufficient_vram on unified memory machines, set OLLAMA_PORT=8080 in the macOS compose overlay with GPU_BACKEND=apple alignment, added dynamic port conflict detection from extension manifests on macOS, added cross-platform `_sed_i` helper for BSD/GNU sed compatibility, removed API key from token-spy HTML response replacing it with a sessionStorage-based login overlay, added WSL2 host RAM detection via powershell.exe for correct tier selection, fixed dashboard health checks to treat HTTP 4xx as unhealthy, replaced GNU-only `date +%s%N` with portable `_now_ms()` timestamps across 8 files, fixed COMPOSE_FLAGS word-splitting bugs by converting to arrays, added a macOS readiness sidecar for native llama-server before open-webui starts, added mode-aware compose overlays for litellm/openclaw/perplexica depends_on (local/hybrid only), fixed subprocess leak on client disconnect in setup.py, added Bash 4+ guard with Homebrew re-exec for macOS health checks replacing associative arrays with portable indexed arrays, and added .get() defaults for optional manifest feature fields preventing KeyError on sparse manifests, added Langfuse LLM observability extension (foundation) shipping disabled by default with auto-generated secrets and telemetry suppression, added Bash 4+ guard with portable indexed arrays for macOS health checks, wired LiteLLM to Langfuse with conditional callback activation, removed duplicate network definition in docker-compose.base.yml, fixed macOS llama-server DNS resolution for LiteLLM via extra_hosts, surfaced manifest YAML parse errors in the dashboard-api status response with narrowed exception handling, and led the extensions-library hardening campaign: bulk manifest corrections, security hardening (localhost binding, credential requirements, session isolation), setup hooks for 10+ services, image digest pinning, healthcheck fixes, and port conflict resolution across the entire 19-service extension catalog. Continued with a second wave of 24 extensions-library PRs: standardized all 33 extension READMEs to a consistent format (-760 net lines), added platform compatibility matrix, made service.description a required schema field, replaced localhost with 127.0.0.1 in healthcheck URLs across all extensions (IPv6 fix), added Weaviate RAFT single-node config, fixed open-interpreter starlette dependency conflict and gcc build deps, added fooocus GPU compose overlay, added milvus standalone env vars, fixed paperless-ngx Redis config, aligned rvc/bark env vars between compose and manifest, removed stale top-level name from 7 compose files, and fixed immich postgres image to pgvecto-rs
 *   [Youness Yachouti (y-coffee-dev)](https://github.com/y-coffee-dev) — Designed and built the full-stack multi-GPU system: NVIDIA topology detection via nvidia-smi topo matrix parsing, four-phase GPU assignment algorithm with topology-aware service placement, docker-compose.multigpu.yml overlay generation, and the dashboard GPU Monitor page with per-GPU cards, SVG sparkline charts, topology visualization, and service assignment views. Added five dream gpu CLI subcommands (status, topology, assignment, validate, reassign) with --auto/--manual/--dry-run modes and bash tab completions. Rewrote lib/safe-env.sh to split on first = only, fixing base64 value truncation in .env parsing. Added GPU environment passthrough to dashboard-api, SDXL download guard for disabled ComfyUI, and ANSI escape stripping for nvidia-smi output. Contributed 345 lines of GPU-specific tests. Tested on real multi-GPU hardware including 4x RTX 4060 Ti, 4x RTX 4080, and 8x RTX 5060 Ti configurations.
+*   [Tony363 (Tony Siu)](https://github.com/Tony363) — Raised dashboard-api test coverage to 95% with 3,500+ lines of tests across 14 files including comprehensive endpoint coverage for setup, privacy, workflows, updates, agents, and GPU monitoring, plus 7 BATS shell test suites covering logging, constants, path-utils, bootstrap-model, nvidia-topo, ui, and background-tasks. Added comprehensive architecture overview documentation (ARCHITECTURE.md) with Mermaid diagrams for service topology, installer pipeline, and compose layering. Fixed the pre-existing ThemeProvider CI failure that was blocking every PR frontend check. Reported the PyYAML import crash on Manjaro/Arch (resolve-compose-stack.sh) with clear root cause analysis. Drives developer outreach and ecosystem growth as head of Coffee and Code Philadelphia. Earlier work: hardened service-registry.sh against shell injection, improved PII scrubber with Luhn check, fixed token-spy settings persistence with atomic writes, fixed SSH command injection in session-manager.sh, narrowed broad exception catches across dashboard-api, and authored CLAUDE.md with project instructions and design philosophy
 *   [latentcollapse (Matt C)](https://github.com/latentcollapse) — Security audit and hardening: OpenClaw localhost binding fix, multi-GPU VRAM detection, AMD dashboard hardening, and the Agent Policy Engine (APE) extension
 *   [Igor Lins e Silva (igorls)](https://github.com/igorls) — Stability audit fixing 9 infrastructure bugs: dynamic compose discovery in backup/restore/update scripts, Token Spy persistent storage and connection pool hardening, dotglob rollback fix, systemd auto-resume service correction, removed auth gate from preflight ports endpoint for setup wizard compatibility, added ESLint flat config for the dashboard, cleaned up unused imports and linting across the Python codebase, and resolved CI failures across dashboard and smoke tests
 *   [Nino Skopac (NinoSkopac)](https://github.com/NinoSkopac) — Token Spy dashboard improvements: shared metric normalization with parity tests, budget and active session tracking, configurable secure CORS replacing wildcard origins, and DB backend compatibility shim for sidecar migration