The coffee giant will pay $1M and submit annual compliance certifications for four years under the agreement.