A settlement with the Christian Employers Alliance blocks the EEOC from ever investigating the group’s members for gender identity discrimination.