Institutional processes and regulatory risk: A case study of the Thai energy sector