Six credit-rating providers, including Moody’s and S&P, agreed to pay a total of $49 million in civil penalties in the latest settlement with the SEC over off-channel communications.