How do I include ‘tank overfilling’ in a risk assessment?

You first choose to include such events in your definition of ‘failure’. Then, the event is assessed like any integrity-threatening event, in terms of exposure, mitigation, and resistance. Perhaps this event can be included as an Incorrect Operations scenario, along with analogous events such as overpressure.