ACSE-Eval: Can LLMs threat model real-world cloud infrastructure?