[Bug] override url with configurator from "service-name.configurators" in interface mode not as expected

### Pre-check

- [X] I am sure that all the content I provide is in English.

### Search before asking

- [X] I had searched in the [issues](https://github.com/apache/dubbo/issues?q=is%3Aissue) and found no similar issues.

### Apache Dubbo Component

Java SDK (apache/dubbo)

### Dubbo Version

Dubbo java 3.2.11，oracle jdk 1.8

### Steps to reproduce this issue

##### step 1 add service mode dynamic config

##### step 2 ReferenceConfigurationListener#notifyOverrides

##### step3 RegistryDirectory#refreshOverrideAndInvoker() -> refreshInvoker()

##### step4 mergeUrl

##### step5 overrideWithReferenceConfigurators

##### step6 service configurator rule mismatch

### What you expected to happen

isV27ConditionMatchOrUnset return true when application and service is matched

### Anything else

_No response_

### Are you willing to submit a pull request to fix on your own?

- [ ] Yes I am willing to submit a pull request on my own!

### Code of Conduct

- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)

Start by tracing ReferenceConfigurationListener#notifyOverrides through RegistryDirectory#refreshOverrideAndInvoker(), refreshInvoker(), mergeUrl, and overrideWithReferenceConfigurators. Reproduce the service-mode dynamic configuration on Dubbo 3.2.11 with JDK 8, then inspect the service configurator rule mismatch. Done means isV27ConditionMatchOrUnset returns true when both application and service match.

Written by the indexing model from the issue text.