Deal falls short of starkest measures, including consent decree and overhaul of university’s governance structure