Do Quantum Key Distribution and Physical Unclonable Functions combine, and how?
It seems difficult to combine the two. PUFs can provide authentication but they are based on the sender having first built up a small number of challenge/response pairs before handing the PUF over. So if Alice gives the PUF to Bob, Alice can authenticate Bob with the response. However if the protocol is two-phased, where Alice authenticates Bob and then they do QKD, the MITM will just jump in at the second phase. So the idea is that PUF-based authentication needs to be binded to the key generated during QKD.

For example, Alice and Bob could perform QKD but treat the output as a challenge, and the response from the PUF is their shared secret key. Unfortunately, the number of possible outputs is too large for building up a set of challenge/response pairs. Without jumping into using classical cryptography, I don't see a way that the addition of a PUF could be useful.